| ⌊err0⌋ ⊦ ⟪adr := ?; boolvar := ?; ro := ∅; ri := ∅; fo := ∅; fi := ∅; err1 := err0; log := []; fs := ∅; if err1 = ESUCCESS then aubifs_core_index_store#(inodekey(ROOT_INO), adr, fi, ro, fo, fs, log, boolvar; ri); if err1 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err1)⟫ ( err1 = ESUCCESS → boolvar ∧ ubifs-cons(fs, ri, ro, fi, fo, log) ∧ replay-cons-strong(fs, ri, ro, fi, fo, log) ∧ file-node-cons(fs, ri) ∧ orphans-cons(fs, ri, ro) ∧ ri-inj(fi)) |
⌊err0⌋ ⊦ ⟪boolvar := ?; ro := ∅; ri := ∅; fo := ∅; fi := ∅; err1 := err0; log := []; fs := ∅; if err1 = ESUCCESS then aubifs_core_index_store#(inodekey(ROOT_INO), adr, fi, ro, fo, fs, log, boolvar; ri); if err1 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err1)⟫ ( err1 = ESUCCESS → boolvar ∧ ubifs-cons(fs, ri, ro, fi, fo, log) ∧ replay-cons-strong(fs, ri, ro, fi, fo, log) ∧ file-node-cons(fs, ri) ∧ orphans-cons(fs, ri, ro) ∧ ri-inj(fi))