| # wlar0 = # wlar1, # apebs = # wlar1, apebs[m0].vidhdr.leb = VTBL_LNUM, avhdr.leb = VTBL_LNUM, wlar1[m0].status = used, apebs[m0].vidhdr.vol = VTBL_VOLID, avhdr.vol = VTBL_VOLID, apebs[m0] = mkpeb(aehdr, avhdr, buf, m2, boolvar), wlar0[m0] = wl-entry(m3, used), m0 < # apebs, m0 < # wlar1, bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset0, wlar0), is-encoded(to-vtbl(vols1), apebs[m0].data), is-encoded(to-vtbl(vols0), buf), unique-sqns(apebs), valid-ebatbl(apebs, wlar1, vols1, m0), valid-ebatbl(apebs, wlar0, vols0, m0), valid-eraseq(q1), valid-eraseq(wlar1, q1), valid-eraseq(apebs, q1), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs, q0), valid-eraseq-strong(apebs, to-vtbl(vols0), q0), valid-global-sqn(apebs, m1), valid-global-sqn(apebs, n1), valid-wl(apebs, wlar1), valid-wl(apebs, wlar0) ⊦ VTBL_VOLID ∈ vols1, VTBL_VOLID ∈ vols0, (v ∈ vols1 ↔ v ∈ vols0) ∧ (v ∈ vols1 → # vols1[v] = # vols0[v] ∧ (m < # vols1[v] ∧ vols1[v][m] ≠ unmapped → vols1[v][m] = vols0[v][m])) |
# wlar0 = # wlar1, # apebs = # wlar1, avhdr.leb = VTBL_LNUM, wlar1[m0].status = used, avhdr.vol = VTBL_VOLID, apebs[m0] = mkpeb(aehdr, avhdr, buf, m2, boolvar), wlar0[m0] = wl-entry(m3, used), to-vtbl(vols0) = to-vtbl(vols1), m0 < # wlar1, bflipset-cons(bflipset1, wlar1), bflipset-cons(bflipset0, wlar0), is-encoded(to-vtbl(vols1), buf), unique-sqns(apebs), valid-ebatbl(apebs, wlar1, vols1, m0), valid-ebatbl(apebs, wlar0, vols0, m0), valid-eraseq(q1), valid-eraseq(wlar1, q1), valid-eraseq(apebs, q1), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs, q0), valid-eraseq-strong(apebs, to-vtbl(vols1), q0), valid-global-sqn(apebs, m1), valid-global-sqn(apebs, n1), valid-wl(apebs, wlar1), valid-wl(apebs, wlar0) ⊦ VTBL_VOLID ∈ vols1, VTBL_VOLID ∈ vols0, (v ∈ vols1 ↔ v ∈ vols0) ∧ (v ∈ vols1 → # vols1[v] = # vols0[v] ∧ (m < # vols1[v] ∧ vols1[v][m] ≠ unmapped → vols1[v][m] = vols0[v][m]))
Used simplifier rules: ⊦ is-encoded(vtbl0, buf) → (is-encoded(vtbl1, buf) ↔ vtbl0 = vtbl1); (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).data = buf; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).vidhdr = avhdr; (s)