| # wlar = # apebs, subarray(wlar[m6, wl-entry(n0, used)][m3, wl-entry(n1, erasing)], 0, m6 + 1)[m6] = wl-entry(m11, stat), apebs[0 + m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), recs[v × n] = recovery-entry(m3, m4), apebs[m6] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), m6 < # apebs, m6 < m6 + 1, v × n ∈ recs, ∀ ladr, m0. ladr ∈ recs ∧ recs[ladr].pnum = m0 ↔ wlar[m0].status = used ∧ m0 < m6 ∧ apebs[m0].vidhdr.vol = ladr.vol ∧ apebs[m0].vidhdr.leb = ladr.leb ⊦ avhdr.leb = n ∧ avhdr.vol = v ∧ stat = used |
# wlar = # apebs, recs[v × n] = recovery-entry(m3, m4), apebs[m6] = mkpeb(aehdr0, avidhdr(v, n, m0, m1, m5), buf0, m10, boolvar0), wlar[m6, wl-entry(n0, used)][m3, wl-entry(n1, erasing)][m6] = wl-entry(m11, stat), m6 < # apebs, v × n ∈ recs, ∀ ladr, m0. ladr ∈ recs ∧ recs[ladr].pnum = m0 ↔ wlar[m0].status = used ∧ m0 < m6 ∧ apebs[m0].vidhdr.vol = ladr.vol ∧ apebs[m0].vidhdr.leb = ladr.leb ⊦ stat = used
Used simplifier rules: ⊦ avidhdr(v, m, m0, m1, m2).vol = v; (s)% ⊦ avidhdr(v, m, m0, m1, m2).leb = m; (s)%⊦ mkpeb(aehdr, avhdr, buf, m, boolvar) = mkpeb(aehdr0, avhdr0, buf0, m0, boolvar0) ↔ aehdr = aehdr0 ∧ avhdr = avhdr0 ∧ buf = buf0 ∧ m = m0 ∧ (boolvar ↔ boolvar0); (s)% ⊦ ¬ n < n; (s)% ⊦ m < n + 1 ↔ ¬ n < m; (s)% ⊦ n0 < n → subarray(wlar, m, n)[n0] = wlar[m + n0]; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)