| # apebs = # wlar, # apebs0 = # wlar0, # vols0[v0] = # avols[v0], apebs0[vols0[v0][m2].pnum] = mkpeb(aehdr1, avhdr1, buf1, m3, boolvar1), apebs[vols0[v][m].pnum] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), apebs0[n] = mkpeb(aehdr, avhdr, buf, m0, boolvar), m2 < # avols[v0], abs(avols, apebs, vols0, q), bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols0)), ubi-io-inv(apebs), ubi-io-inv(apebs0), unique-sqns(apebs), unique-sqns(apebs0), valid-ebatbl(apebs, wlar, vols0, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-global-sqn(apebs, sqnum), valid-global-sqn(apebs0, sqnum0), valid-vtbl(apebs, vols0, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum0), valid-wl(apebs, wlar), valid-wl(apebs0, wlar0), v0 ∈ vols0, v0 ∈ avols, q0.lebrefs ⊆ q.lebrefs ++ (VTBL_VOLID × VTBL_LNUM), m2 < # avols[v0] → (vols0[v0][m2] = unmapped → ¬ avols[v0][m2].mapped?) ∧ ( vols0[v0][m2] ≠ unmapped → avols[v0][m2].mapped? ∧ avols[v0][m2].data = apebs0[vols0[v0][m2].pnum].data ∧ apebs0[vols0[v0][m2].pnum].fill ≤ avols[v0][m2].fill) ∧ (avols[v0][m2] = erased → ¬ v0 × m2 ∈ q) ⊦ VTBL_VOLID ∈ vols0, (vols0[v0][m2] = unmapped → ¬ avols[v0][m2].mapped?) ∧ (vols0[v0][m2] ≠ unmapped → avols[v0][m2].mapped? ∧ avols[v0][m2].data = buf1 ∧ m3 ≤ avols[v0][m2].fill) ∧ (avols[v0][m2] = erased → ¬ v0 × m2 ∈ q0) |
# vols0[v0] = # avols[v0], # apebs0 = # wlar0, # apebs = # wlar, avols[v0][m2] = erased, apebs0[n] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs[vols0[v][m].pnum] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), apebs0[unmapped.pnum] = mkpeb(aehdr1, avhdr1, buf1, m3, boolvar1), vols0[v0][m2] = unmapped, m2 < # avols[v0], abs(avols, apebs, vols0, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols0)), ubi-io-inv(apebs0), ubi-io-inv(apebs), unique-sqns(apebs0), unique-sqns(apebs), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum0), valid-ebatbl(apebs, wlar, vols0, vtblpnum), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs0, sqnum0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum0), valid-vtbl(apebs, vols0, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs, wlar), v0 × m2 ∈ q0, v0 ∈ avols, v0 ∈ vols0, q0.lebrefs ⊆ q.lebrefs ++ (VTBL_VOLID × VTBL_LNUM) ⊦ v0 × m2 ∈ q, VTBL_VOLID ∈ vols0
Used simplifier rules: ⊦ ¬ erased.mapped?; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).fill = m; (s)% ⊦ mkpeb(aehdr, avhdr, buf, m, boolvar).data = buf; (s)