| vtblpnum2 = LEB_SIZE, vtblpnum3 = EB_PAGE_SIZE, vtblpnum < # avols[v], abs(avols, apebs, vols, q), ebm-cons(avols), is-aligned(n, EB_PAGE_SIZE), is-aligned(vtblpnum0, EB_PAGE_SIZE), ubi-cons(apebs, vols, wlar, q, bflipset, vtblpnum1, sqnum), ubi-io-inv(apebs), v ∈ avols, n + n0 ≤ # buf, vtblpnum0 + n ≤ LEB_SIZE, avols[v][vtblpnum].mapped? → vtblpnum0 ≥ avols[v][vtblpnum].fill ⊦ ⟪ubi_write#(v, vtblpnum, vtblpnum0, n0, n, buf, vtblpnum3; vols, wlar, q, bflipset, vtblpnum1, sqnum, apebs; err)⟫ ⟨ebm_write#(v, vtblpnum, vtblpnum0, n0, n, buf; avols; err0)⟩ (abs(avols, apebs, vols, q) ∧ err = err0) |
# apebs = # wlar, vtblpnum < # avols[v], abs(avols, apebs, vols, q), bflipset-cons(bflipset, wlar), ebm-cons(avols), is-aligned(n, EB_PAGE_SIZE), is-aligned(vtblpnum0, EB_PAGE_SIZE), ubi-io-inv(apebs), unique-sqns(apebs), valid-ebatbl(apebs, wlar, vols, vtblpnum1), valid-eraseq(apebs, q), valid-eraseq(wlar, q), valid-eraseq(q), valid-global-sqn(apebs, sqnum), valid-vtbl(apebs, vols, wlar, vtblpnum1), valid-wl(apebs, wlar), v ∈ avols, n + n0 ≤ # buf, vtblpnum0 + n ≤ LEB_SIZE, ¬ VTBL_VOLID ∈ vols, avols[v][vtblpnum].mapped? → avols[v][vtblpnum].fill ≤ vtblpnum0 ⊦ ⟪ubi_write#(v, vtblpnum, vtblpnum0, n0, n, buf, EB_PAGE_SIZE; vols, wlar, q, bflipset, vtblpnum1, sqnum, apebs; err)⟫ ⟨ebm_write#(v, vtblpnum, vtblpnum0, n0, n, buf; avols; err0)⟩ (abs(avols, apebs, vols, q) ∧ err = err0)
Used simplifier rules: ⊦ m < n → n ≠ 0; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ n ≥ m ↔ m ≤ n; (s)%⊦ ubi-cons(apebs, vols, wlar, q, bflipset, n0, n1) ↔ # apebs = # wlar ∧ unique-sqns(apebs) ∧ valid-global-sqn(apebs, n1) ∧ valid-wl(apebs, wlar) ∧ valid-eraseq(q) ∧ valid-eraseq(wlar, q) ∧ valid-eraseq(apebs, q) ∧ ¬ VTBL_VOLID ∈ vols ∧ bflipset-cons(bflipset, wlar) ∧ valid-ebatbl(apebs, wlar, vols, n0) ∧ valid-vtbl(apebs, vols, wlar, n0); (s)