| apebs[m] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # apebs, ∀ v, m1. (valid-peb(v, m1, mkpeb(aehdr, avhdr, buf, m0, boolvar)) ↔ v0 × m2 = v × m1) ∧ (v0 × m2 = v × m1 → avhdr.sqn ≠ valid-sqns(v, m1, apebs).max) ⊦ valid-peb(v0, m2, mkpeb(aehdr, avhdr, buf, m0, boolvar)) |
Used terms: v0, m2