| 0 = datasize(buf, n), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), wlar[n2] = wl-entry(m0, stat), wlar[n1] = wl-entry(m1, stat0), err = ESUCCESS, err = err0, vtblpnum0 = vols[v][m2].pnum, vtblpnum2 = n2, wlar0 = wlar, aehdr.valid?, n2 < # apebs, n2 < # wlar, n1 < # wlar, m2 < # vols[v], v ∈ vols, ⌊err0⌋ ∨ err0 = ESUCCESS, v ∈ vols ∧ m2 < # vols[v] ∧ vols[v][m2] = ⌜n1⌝ ∨ v = VTBL_VOLID ∧ m2 = VTBL_LNUM ∧ vtblpnum1 = n1 ⊦ [ubi_wl_put_peb#(v × m2, vtblpnum0; wlar, q); bflipset := bflipset -- vtblpnum0; vols[v][m2] := ⌜vtblpnum2⌝ ; wlar[vtblpnum2] := wl-entry(wlar[vtblpnum2].ec, used)] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ (err = ESUCCESS → wlar[n2].ec = m0 ∧ wlar[n1].ec = m1)), vols[v][m2] = unmapped, n2 = n1, v = VTBL_VOLID ∧ m2 = VTBL_LNUM |
0 = datasize(buf, n), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), wlar[n2] = wl-entry(m0, stat), wlar[n1] = wl-entry(m1, stat0), wlar0 = wlar, vols[v][m2] ≠ unmapped, n2 ≠ n1, aehdr.valid?, n2 < # apebs, n2 < # wlar, n1 < # wlar, m2 < # vols[v], v ∈ vols, vols[v][m2] = ⌜n1⌝ ∨ v = VTBL_VOLID ∧ m2 = VTBL_LNUM ∧ vtblpnum1 = n1 ⊦ [ubi_wl_put_peb#(v × m2, vols[v][m2].pnum; wlar, q); bflipset := bflipset -- vols[v][m2].pnum; vols[v][m2] := ⌜n2⌝ ; wlar[n2] := wl-entry(wlar[n2].ec, used)] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ wlar[n2].ec = m0 ∧ wlar[n1].ec = m1), v = VTBL_VOLID ∧ m2 = VTBL_LNUM
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ ¬ ⌊ESUCCESS⌋ ; (s)