| wlar0 = wlar, wlar[n].ec + UBI_ERASE_RETRIES < ecs(wlar).max, n < # wlar ⊦ [ubi_erase_worker_helper#(n; wlar, apebs; err)] ∃ m, stat. m ≠ 0 ∧ m ≤ UBI_ERASE_RETRIES + 1 ∧ Δ wlar + m = Δ wlar0 |
wlar0 = wlar, wlar[n].ec + UBI_ERASE_RETRIES < ecs(wlar).max, n < # wlar ⊦ [ubi_erase_worker_helper#(n; wlar, apebs; err)] ∃ m. m ≠ 0 ∧ m ≤ UBI_ERASE_RETRIES + 1 ∧ Δ wlar + m = Δ wlar0
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic