| apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m2, false), apebs0[n] = mkpeb(aehdr, avhdr, buf, m1, false), wlar[n] = wl-entry(m0, stat0), err = ESUCCESS, err = err0, wlar1 = wlar[n, wl-entry(wlar[n].ec + UBI_ERASE_RETRIES + 1, stat)], n < # wlar1, n < # apebs0, n < # apebs, n < # wlar, ⌊err2⌋ , ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ err1 = ESUCCESS, ∃ m, stat. m ≠ 0 ∧ m ≤ UBI_ERASE_RETRIES + 1 ∧ wlar1[n, wl-entry(wlar1[n].ec, erroneous)] = wlar[n, wl-entry(m0 + m, stat)] |
apebs[n] = mkpeb(aehdr0, avhdr0, buf0, m2, false), apebs0[n] = mkpeb(aehdr, avhdr, buf, m1, false), wlar[n] = wl-entry(m0, stat0), n < # apebs0, n < # apebs, n < # wlar, ⌊err2⌋ ⊦ err1 = ESUCCESS, ∃ m, stat. m ≠ 0 ∧ m ≤ UBI_ERASE_RETRIES + 1 ∧ wlar[n, wl-entry(m0 + UBI_ERASE_RETRIES + 1, erroneous)] = wlar[n, wl-entry(m0 + m, stat)]
Used simplifier rules: a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%m < # wlar ⊦ wlar[m, wle][m, wle0] = wlar[m, wle0]; (s)% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ wl-entry(m, stat).ec = m; (s)% ⊦ m < # wlar → wlar[m, wle][m] = wle; (s)% ⊦ ¬ ⌊ESUCCESS⌋ ; (s)% ⊦ # wlar[n, wle] = # wlar; (s)