| 0 = datasize(buf, n), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), wlar[n2] = wl-entry(m0, stat), wlar[n1] = wl-entry(m1, stat0), wlar0 = wlar, vols[v][m2] ≠ unmapped, n2 ≠ n1, aehdr.valid?, n2 < # apebs, n2 < # wlar, n1 < # wlar, m2 < # vols[v], v ∈ vols, vols[v][m2] = ⌜n1⌝ ∨ v = VTBL_VOLID ∧ m2 = VTBL_LNUM ∧ vtblpnum1 = n1 ⊦ [ubi_wl_put_peb#(v × m2, vols[v][m2].pnum; wlar, q); bflipset := bflipset -- vols[v][m2].pnum; vols[v][m2] := ⌜n2⌝ ; wlar[n2] := wl-entry(wlar[n2].ec, used)] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ wlar[n2].ec = m0 ∧ wlar[n1].ec = m1), v = VTBL_VOLID ∧ m2 = VTBL_LNUM |
0 = datasize(buf, n), wlar[n1] = wl-entry(m1, stat0), wlar[n2] = wl-entry(m0, stat), apebs[n2] = mkpeb(aehdr, empty, buf0, m, false), vols[v][m2] = ⌜m3⌝ , wlar0 = wlar, aehdr.valid?, m2 < # vols[v], n1 < # wlar, n2 < # wlar, n2 < # apebs, v ∈ vols, vols[v][m2] = ⌜n1⌝ ∨ v = VTBL_VOLID ∧ m2 = VTBL_LNUM ∧ vtblpnum1 = n1 ⊦ [ubi_wl_put_peb#(v × m2, m3; wlar, q); bflipset := bflipset -- m3; vols[v][m2] := ⌜n2⌝ ; wlar[n2] := wl-entry(wlar[n2].ec, used)] ( sum-of-differences(ecs(wlar).max, ecs(wlar)) = sum-of-differences(ecs(wlar0).max, ecs(wlar0)) ∧ ecs(wlar) = ecs(wlar0) ∧ wlar[n2].ec = m0 ∧ wlar[n1].ec = m1), vols[v][m2] = unmapped, n2 = n1, v = VTBL_VOLID ∧ m2 = VTBL_LNUM
Used simplifier rules: ⊦ ebae ≠ unmapped → (m = ebae.pnum ↔ ebae = ⌜m⌝ ); (elim) Used terms: vols[v][m2], m3