| # wlar = # apebs, apebs[m6] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), recs[v × n] = recovery-entry(m3, m4), subarray(apebs, 0, m6 + 1)[m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), subarray(wlar[m6, wl-entry(n0, used)][m3, wl-entry(n1, erasing)], 0, m6 + 1)[m6] = wl-entry(m11, stat), m6 < # apebs, v × n ∈ recs, ∀ ladr, m0. ladr ∈ recs ∧ recs[ladr].pnum = m0 ↔ wlar[m0].status = used ∧ m0 < m6 ∧ apebs[m0].vidhdr.vol = ladr.vol ∧ apebs[m0].vidhdr.leb = ladr.leb ⊦ avhdr.leb = n ∧ avhdr.vol = v ∧ stat = used |
⊦ n0 < n → subarray(apebs, m, n)[n0] = apebs[m + n0]
# wlar = # apebs, subarray(wlar[m6, wl-entry(n0, used)][m3, wl-entry(n1, erasing)], 0, m6 + 1)[m6] = wl-entry(m11, stat), apebs[0 + m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), recs[v × n] = recovery-entry(m3, m4), apebs[m6] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), m6 < # apebs, m6 < m6 + 1, v × n ∈ recs, ∀ ladr, m0. ladr ∈ recs ∧ recs[ladr].pnum = m0 ↔ wlar[m0].status = used ∧ m0 < m6 ∧ apebs[m0].vidhdr.vol = ladr.vol ∧ apebs[m0].vidhdr.leb = ladr.leb ⊦ avhdr.leb = n ∧ avhdr.vol = v ∧ stat = used
Used simplifier rules: ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ ¬ n < n; (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic%# apebs = n ⊦ subarray(apebs, 0, n) = apebs; (s)% ⊦ # wlar[n, wle] = # wlar; (s)%# wlar = n ⊦ subarray(wlar, 0, n) = wlar; (s) Used terms: m6, m6 + 1, 0, apebs