| # wlar = # apebs, avhdr.leb = m7, avhdr.vol = v0, subarray(wlar[m, wl-entry(n0, used)][m3, wl-entry(n1, erasing)], 0, m + 1)[m6] = wl-entry(m11, stat), recs[v × n, recovery-entry(m, m0)][v0 × m7] = recovery-entry(m8, m9), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), recs[v × n] = recovery-entry(m3, m4), subarray(apebs, 0, m + 1)[m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), stat = used, m < # apebs, v × n ∈ recs, ∀ ladr, m6. ladr ∈ recs ∧ recs[ladr].pnum = m6 ↔ wlar[m6].status = used ∧ m6 < m ∧ apebs[m6].vidhdr.vol = ladr.vol ∧ apebs[m6].vidhdr.leb = ladr.leb ⊦ m < m6, v0 × m7 ∈ recs[v × n, recovery-entry(m, m0)] ∧ m8 = m6 |
# wlar = # apebs, subarray(apebs, 0, m + 1)[m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), recs[v × n] = recovery-entry(m3, m4), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), recs[v × n, recovery-entry(m, m0)][avhdr.vol × avhdr.leb] = recovery-entry(m8, m9), subarray(wlar[m, wl-entry(n0, used)][m3, wl-entry(n1, erasing)], 0, m + 1)[m6] = wl-entry(m11, used), m < # apebs, m6 < # apebs, v × n ∈ recs, m6 ≤ m, ∀ ladr, m6. ladr ∈ recs ∧ recs[ladr].pnum = m6 ↔ wlar[m6].status = used ∧ m6 < m ∧ apebs[m6].vidhdr.vol = ladr.vol ∧ apebs[m6].vidhdr.leb = ladr.leb ⊦ avhdr.vol × avhdr.leb ∈ recs[v × n, recovery-entry(m, m0)] ∧ m8 = m6
Used simplifier rules: lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic%fle-01: ⊦ m ≤ n ∧ n < n0 → m < n0; (forward) from specification nat% ⊦ m < n ↔ ¬ n ≤ m; (ss)