| 0 = datasize(buf, n), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), wlar[n2] = wl-entry(m0, stat), wlar[n1] = wl-entry(m1, stat0), lref = VTBL_VOLID × VTBL_LNUM, vtblpnum = vtblpnum1, wlar0 = wlar, aehdr.valid?, n2 < # apebs, n2 < # wlar, n1 < # wlar, vtblpnum < # wlar, VTBL_VOLID ∈ vols ∧ VTBL_LNUM < # vols[VTBL_VOLID] ∧ vols[VTBL_VOLID][VTBL_LNUM] = ⌜n1⌝ ∨ vtblpnum1 = n1 ⊦ [wlar := wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)]] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ wlar[n2].ec = m0 ∧ wlar[n1].ec = m1), n2 = n1 |
0 = datasize(buf, n), wlar[n1] = wl-entry(m1, stat0), wlar[n2] = wl-entry(m0, stat), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), lref = VTBL_VOLID × VTBL_LNUM, vtblpnum = vtblpnum1, wlar0 = wlar, aehdr.valid?, n2 < # wlar[vtblpnum, wlar[vtblpnum].status:= erasing], vtblpnum < # wlar, n1 < # wlar, n2 < # wlar, n2 < # apebs, VTBL_VOLID ∈ vols ∧ VTBL_LNUM < # vols[VTBL_VOLID] ∧ vols[VTBL_VOLID][VTBL_LNUM] = ⌜n1⌝ ∨ vtblpnum1 = n1 ⊦ n2 = n1, sum-of-differences (ecs(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)]).max, ecs(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)])) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)]) = ecs(wlar0) ∧ wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)][n2].ec = m0 ∧ wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2, wl-entry(wlar[vtblpnum, wlar[vtblpnum].status:= erasing][n2].ec, used)][n1].ec = m1