| # apebs = # wlar, # apebs0 = # wlar0, # vols0[v0] = # avols[v0], vols0[v0][m2] = unmapped, apebs0[unmapped.pnum] = mkpeb(aehdr1, avhdr1, buf1, m3, boolvar1), apebs[vols0[v][m].pnum] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), apebs0[n] = mkpeb(aehdr, avhdr, buf, m0, boolvar), avols[v0][m2] = erased, m2 < # avols[v0], abs(avols, apebs, vols0, q), bflipset-cons(bflipset, wlar), bflipset-cons(bflipset0, wlar0), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols0)), ubi-io-inv(apebs), ubi-io-inv(apebs0), unique-sqns(apebs), unique-sqns(apebs0), valid-ebatbl(apebs, wlar, vols0, vtblpnum), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum0), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-eraseq(apebs0, q0), valid-eraseq(wlar0, q0), valid-eraseq(q0), valid-global-sqn(apebs, sqnum), valid-global-sqn(apebs0, sqnum0), valid-vtbl(apebs, vols0, wlar, vtblpnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum0), valid-wl(apebs, wlar), valid-wl(apebs0, wlar0), v0 ∈ vols0, v0 ∈ avols, v0 × m2 ∈ q0, ∀ lref. lref ∈ q0.lebrefs → lref ∈ q.lebrefs ++ (VTBL_VOLID × VTBL_LNUM) ⊦ VTBL_VOLID ∈ vols0, v0 × m2 ∈ q |
# vols0[v0] = # avols[v0], # apebs0 = # wlar0, # apebs = # wlar, avols[v0][m2] = erased, apebs0[n] = mkpeb(aehdr, avhdr, buf, m0, boolvar), apebs[vols0[v][m].pnum] = mkpeb(aehdr0, avhdr0, buf0, m1, boolvar0), apebs0[unmapped.pnum] = mkpeb(aehdr1, avhdr1, buf1, m3, boolvar1), vols0[v0][m2] = unmapped, m2 < # avols[v0], abs(avols, apebs, vols0, q), bflipset-cons(bflipset0, wlar0), bflipset-cons(bflipset, wlar), ebm-cons(avols), id(apebs0, apebs, mapped-pebs(vols0)), ubi-io-inv(apebs0), ubi-io-inv(apebs), unique-sqns(apebs0), unique-sqns(apebs), valid-ebatbl(apebs0, wlar0, vols0, vtblpnum0), valid-ebatbl(apebs, wlar, vols0, vtblpnum), valid-eraseq(q0), valid-eraseq(wlar0, q0), valid-eraseq(apebs0, q0), valid-eraseq(q), valid-eraseq(wlar, q), valid-eraseq(apebs, q), valid-global-sqn(apebs0, sqnum0), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs0, vols0, wlar0, vtblpnum0), valid-vtbl(apebs, vols0, wlar, vtblpnum), valid-wl(apebs0, wlar0), valid-wl(apebs, wlar), v0 × m2 ∈ q0, v0 ∈ avols, v0 ∈ vols0, ∀ lref. lref ∈ q0 ∧ lref ≠ none → lref = VTBL_VOLID × VTBL_LNUM ∨ lref ∈ q ⊦ v0 × m2 ∈ q, VTBL_VOLID ∈ vols0
Used simplifier rules: ⊦ lref ∈ s0 ++ lref0 ↔ lref = lref0 ∨ lref ∈ s0; (s)% ⊦ lref ∈ q0.lebrefs ↔ lref ∈ q0 ∧ lref ≠ none; (s)