| # wlar = # wlar0, # apebs0 = # wlar0, apebs0[vols0[v][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), abs(avols0, apebs0, vols, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum0), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs0, wlar), v ∈ vols0, # vols0[v] ≤ # vols0[v], vols ⊆ vols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉ ⊦ VTBL_VOLID ∈ vols, VTBL_VOLID ∈ vols0, # vols0[v] = # vols0[v] ∧ ( m < # vols0[v] → (vols0[v][m] = unmapped → ¬ absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].mapped?) ∧ ( vols0[v][m] ≠ unmapped → absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].mapped? ∧ absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].data = buf ∧ m0 ≤ absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].fill) ∧ (absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m] = erased → ¬ v × m ∈ q0)) |
# wlar = # wlar0, # apebs0 = # wlar0, apebs0[vols0[v][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # vols0[v], abs(avols0, apebs0, vols, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-eraseq(apebs0, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs0, sqnum), valid-global-sqn(apebs0, vtblpnum0), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs0, wlar), v ∈ vols0, vols ⊆ vols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉ ⊦ VTBL_VOLID ∈ vols, VTBL_VOLID ∈ vols0, (vols0[v][m] = unmapped → ¬ absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].mapped?) ∧ ( vols0[v][m] ≠ unmapped → absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].mapped? ∧ absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].data = buf ∧ m0 ≤ absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m].fill) ∧ (absf(v, avols0[v], apebs0, vols0[v], q0, # vols0[v])[m] = erased → ¬ v × m ∈ q0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m ≤ m; (s)