| boolvar0 ↔ true, err0 = ESUCCESS, fi0 = fi, fo0 = fo, fs0 = fs, ks = ro, ks = fo, log0 = log, ri = ri, ri = fi, ri1 = ri, ro = ro, ro = fo, ro1 = ro, ks.inodes?, fo.inodes?, replay-safe(log, fs, fi ⊖ fo) ⊦ ∀ ks, err0, ri, ro. (err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → ks = ro ∧ ro = ∅ ∧ ri = ri1 ⊖ ro1) → ⟪boolvar := true; if err0 = ESUCCESS then aubifs_replaylog#(log, fi, ro, fo, fs, log, boolvar; err0, ri); if err0 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err0)⟫ ((err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → ri = replay-log(log, fs, fi ⊖ fo) ∧ ro = ∅ ∧ boolvar)) |
fo.inodes?, replay-safe(log, fs, fi ⊖ fo), err = ESUCCESS → ks0 = ∅ ∧ ro0 = ∅ ∧ ri0 = fi ⊖ fo, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪boolvar := true; if err = ESUCCESS then aubifs_replaylog#(log, fi, ro0, fo, fs, log, boolvar; err, ri0); if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ro0, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ ro0 = ∅ ∧ boolvar))