| ⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; boolvar := err = ESUCCESS⟫ ( err = ESUCCESS → boolvar ∧ ubifs-cons((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1], ∅, ∅, ∅, adr1 ') ∧ replay-cons-strong((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1], ∅, ∅, ∅, adr1 ') ∧ file-node-cons((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1]) ∧ orphans-cons((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1], ∅)) |
⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; boolvar := err = ESUCCESS⟫ ( err = ESUCCESS → boolvar ∧ ubifs-cons((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1], ∅, ∅, ∅, adr1 ') ∧ replay-cons-strong((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1], ∅, ∅, ∅, adr1 ') ∧ file-node-cons((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1]) ∧ orphans-cons((∅)[adr1, inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0)], (∅)[inodekey(ROOT_INO), adr1], ∅))
⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS