| # apebs = # wlar, # vols[v] = # avols[v], avols[v][vtblpnum5] = mapped(buf1, m0), vols[v][vtblpnum5] = ⌜n1⌝ , apebs[n1] = mkpeb(aehdr, avhdr, buf1, m, false), apebs[vols[v][vtblpnum5].pnum] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar), buf = buf2, n1 < # wlar, vtblpnum5 < # avols[v], bflipset-cons(bflipset, wlar), ebm-cons(avols), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf1, m, false)), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum3), valid-wl(apebs, wlar), v ∈ avols, v ∈ vols, vtblpnum4 + n ≤ LEB_SIZE, n0 + n ≤ # buf2, m ≤ m0 ⊦ ⟨ebm_read#(v, vtblpnum5, vtblpnum4, n0, n, avols; buf2; err1)⟩ (copy(buf0, vtblpnum4, buf, n0, n) = buf2 ∧ ESUCCESS = err1), VTBL_VOLID ∈ vols |
# apebs = # wlar, # vols[v] = # avols[v], apebs[n1] = mkpeb(aehdr, avhdr, buf1, m, false), avols[v][vtblpnum5] = mapped(buf1, m0), vols[v][vtblpnum5] = ⌜n1⌝ , buf = buf2, n1 < # wlar, vtblpnum5 < # avols[v], bflipset-cons(bflipset, wlar), ebm-cons(avols), ubi-io-inv(apebs), ubi-io-peb-inv(mkpeb(aehdr, avhdr, buf1, m, false)), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum3), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum3), valid-wl(apebs, wlar), v ∈ avols, v ∈ vols, vtblpnum4 + n ≤ LEB_SIZE, n0 + n ≤ # buf2, m ≤ m0, ¬ VTBL_VOLID ∈ vols ⊦ ⟨ebm_read#(v, vtblpnum5, vtblpnum4, n0, n, avols; buf2; err1)⟩ (copy(buf1, vtblpnum4, buf, n0, n) = buf2 ∧ ESUCCESS = err1)
Used simplifier rules: ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar) = mkpeb(aehdr0, avhdr0, buf0, m0, boolvar0) ↔ aehdr = aehdr0 ∧ avhdr = avhdr0 ∧ buf = buf0 ∧ m = m0 ∧ (boolvar ↔ boolvar0); (s)%ubi-io-inv-fwd: n < # apebs ⊦ apebs[n] = apeb ∧ ubi-io-inv(apebs) → ubi-io-peb-inv(apeb); (forward) from specification ubi-asm% ⊦ m < n → (n ≤ m ↔ false); (s)% ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ ⌜m⌝ .pnum = m; (s)