| apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0] = wl-entry(m1, stat), n0 < # wlar.mapIndices(nx, λ wle. wle.ec:= n), indices-erasing(wlar, nx), valid-indices(wlar, nx), ∀ n. n < # wlar → (wlar[n].status = erroneous ↔ apebs[n].bad) ∧ (wlar[n].status = free → apebs[n].vidhdr = empty) ∧ (wlar[n].status ≠ erroneous ∧ wlar[n].status ≠ erasing → apebs[n].echdr = aechdr(wlar[n].ec)) ∧ (wlar[n].status = used → (∃ v, m. valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs).max)) ⊦ dups(nx), (stat = erroneous ↔ boolvar) ∧ (stat = free → avhdr = empty) ∧ (stat ≠ erroneous ∧ stat ≠ erasing → aehdr = aechdr(m1)) ∧ (stat = used → (∃ v, m. valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, false)) ∧ avhdr.sqn = valid-sqns(v, m, apebs).max)) |
⊦ valid-indices(wlar, nx) ∧ ¬ dups(nx) ∧ n < # wlar → wlar.mapIndices(nx, f0)[n] = (n ∈ nx ⊃ f0(wlar[n]);wlar[n])
wlar.mapIndices(nx, λ wle. wle.ec:= n)[n0] = wl-entry(m1, stat), apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < # wlar.mapIndices(nx, λ wle. wle.ec:= n), indices-erasing(wlar, nx), valid-indices(wlar, nx), ∀ n. n < # wlar → (wlar[n].status = erroneous ↔ apebs[n].bad) ∧ (wlar[n].status = free → apebs[n].vidhdr = empty) ∧ (wlar[n].status ≠ erroneous ∧ wlar[n].status ≠ erasing → apebs[n].echdr = aechdr(wlar[n].ec)) ∧ (wlar[n].status = used → (∃ v, m. valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs).max)) ⊦ dups(nx), (stat = erroneous ↔ boolvar) ∧ (stat = free → avhdr = empty) ∧ (stat ≠ erroneous ∧ stat ≠ erasing → aehdr = aechdr(m1)) ∧ (stat = used → (∃ v, m. valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, false)) ∧ avhdr.sqn = valid-sqns(v, m, apebs).max)), valid-indices(wlar, nx) ∧ ¬ dups(nx) ∧ n0 < # wlar
(n0 ∈ nx ⊃ wlar[n0].ec:= n;wlar[n0]) = wl-entry(m1, stat), apebs[n0] = mkpeb(aehdr, avhdr, buf, m0, boolvar), n0 < # wlar.mapIndices(nx, λ wle. wle.ec:= n), n0 < # wlar, indices-erasing(wlar, nx), valid-indices(wlar, nx), ∀ n. n < # wlar → (wlar[n].status = erroneous ↔ apebs[n].bad) ∧ (wlar[n].status = free → apebs[n].vidhdr = empty) ∧ (wlar[n].status ≠ erroneous ∧ wlar[n].status ≠ erasing → apebs[n].echdr = aechdr(wlar[n].ec)) ∧ (wlar[n].status = used → (∃ v, m. valid-peb(v, m, apebs[n]) ∧ apebs[n].vidhdr.sqn = valid-sqns(v, m, apebs).max)) ⊦ dups(nx), (stat = erroneous ↔ boolvar) ∧ (stat = free → avhdr = empty) ∧ (stat ≠ erroneous ∧ stat ≠ erasing → aehdr = aechdr(m1)) ∧ (stat = used → (∃ v, m. valid-peb(v, m, mkpeb(aehdr, avhdr, buf, m0, false)) ∧ avhdr.sqn = valid-sqns(v, m, apebs).max))
Used terms: n0, λ wle. wle.ec:= n, nx, wlar