| # avols0[v] = # vols0[v], # apebs0 = # wlar0, # wlar = # wlar0, # vols[v] = # vols0[v], avols0[v][m] = erased, apebs0[vols[v][m].pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m < # vols0[v], bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-global-sqn(apebs0, vtblpnum0), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar0), v ∈ vols0, v ∈ vols, v ∈ avols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉, vols[v][m] ≠ unmapped → vols[v][m] = vols0[v][m], vols[v][m] = unmapped → ¬ avols0[v][m].mapped?, vols[v][m] ≠ unmapped → avols0[v][m].mapped? ∧ avols0[v][m].data = buf ∧ m0 ≤ avols0[v][m].fill, avols0[v][m] = erased → ¬ v × m ∈ q ⊦ (vols0[v][m] = unmapped ⊃ (v × m ∈ q0 ⊃ unmapped;erased) ;mapped(apebs0[vols0[v][m].pnum].data, (avols0[v][m].mapped? ⊃ avols0[v][m].fill;apebs0[vols0[v][m].pnum].fill)) ) = erased, avols0[v][m] = unmapped, VTBL_VOLID ∈ vols0, VTBL_VOLID ∈ vols |
# avols0[v] = # vols0[v], # apebs0 = # wlar0, # wlar = # wlar0, # vols[v] = # vols0[v], avols0[v][m] = erased, apebs0[unmapped.pnum] = mkpeb(aehdr, avhdr, buf, m0, boolvar), vols[v][m] = unmapped, m < # vols0[v], bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols0), is-max(apebs0, vols0, wlar0, q0, bflipset0, vtblpnum3, sqnum), ubi-io-inv(apebs0), unique-sqns(apebs0), valid-ebatbl(apebs0, wlar, vols, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs0, q), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-global-sqn(apebs0, vtblpnum0), valid-global-sqn(apebs0, sqnum), valid-vtbl(apebs0, vols, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum3), valid-wl(apebs0, wlar), valid-wl(apebs0, wlar0), v ∈ vols0, v ∈ vols, v ∈ avols0, q0.lebrefs ⊆ q.lebrefs, vols0⌈vols, q⌉ ⊦ (vols0[v][m] = unmapped ⊃ (v × m ∈ q0 ⊃ unmapped;erased);mapped(apebs0[vols0[v][m].pnum].data, apebs0[vols0[v][m].pnum].fill)) = erased, v × m ∈ q, VTBL_VOLID ∈ vols0, VTBL_VOLID ∈ vols
Used simplifier rules: ⊦ unmapped ≠ erased; (s)% ⊦ ¬ erased.mapped?; (s)