| # wlar = # apebs, apebs[m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), recs[v × n] = recovery-entry(m3, m4), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), recs[v × n, recovery-entry(m, m0)][avhdr.vol × avhdr.leb] = recovery-entry(m8, m9), wlar[m, wl-entry(n0, used)][m6] = wl-entry(m11, used), m6 < # apebs, m < # apebs, v × n ∈ recs, m6 ≤ m, ∀ ladr, m6. ladr ∈ recs ∧ recs[ladr].pnum = m6 ↔ wlar[m6].status = used ∧ m6 < m ∧ apebs[m6].vidhdr.vol = ladr.vol ∧ apebs[m6].vidhdr.leb = ladr.leb ⊦ m6 = m3, avhdr.vol × avhdr.leb ∈ recs[v × n, recovery-entry(m, m0)] ∧ m8 = m6 |
# wlar = # apebs, wlar[m, wl-entry(n0, used)][m6] = wl-entry(m11, used), recs[v × n, recovery-entry(m, m0)][avhdr.vol × avhdr.leb] = recovery-entry(m8, m9), apebs[m] = mkpeb(aehdr, avidhdr(v, n, m0, m1, m5), buf, m2, boolvar), recs[v × n] = recovery-entry(m3, m4), apebs[m6] = mkpeb(aehdr0, avhdr, buf0, m10, boolvar0), m < # apebs, m6 < # apebs, v × n ∈ recs, m6 ≤ m, ∀ ladr, m6. ladr ∈ recs ∧ recs[ladr].pnum = m6 ↔ wlar[m6].status = used ∧ m6 < m ∧ apebs[m6].vidhdr.vol = ladr.vol ∧ apebs[m6].vidhdr.leb = ladr.leb ⊦ m6 = m3, m6 = m, avhdr.vol × avhdr.leb ∈ recs[v × n, recovery-entry(m, m0)] ∧ m8 = m6
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m < n → (n ≤ m ↔ false); (s)%m < # wlar ⊦ wlar[m, wle][m] = wle; (s)% ⊦ wl-entry(m, stat) = wl-entry(m0, stat0) ↔ m = m0 ∧ stat = stat0; (ws)% ⊦ m ≤ m; (s)%⊦ mkpeb(aehdr, avhdr, buf, m, boolvar) = mkpeb(aehdr0, avhdr0, buf0, m0, boolvar0) ↔ aehdr = aehdr0 ∧ avhdr = avhdr0 ∧ buf = buf0 ∧ m = m0 ∧ (boolvar ↔ boolvar0); (s)% ⊦ avidhdr(v, m, m0, m1, m2).vol = v; (s)% ⊦ avidhdr(v, m, m0, m1, m2).leb = m; (s)% ⊦ recs[ladr, rec][ladr] = rec; (s)% ⊦ recovery-entry(m, m0) = recovery-entry(m1, m2) ↔ m = m1 ∧ m0 = m2; (ws)% ⊦ ladr ∈ recs[ladr, rec]; (s) Used formulas: m6 = m