| boolvar ↔ true, fo.inodes?, replay-safe(log, fs, fi ⊖ fo), err = ESUCCESS → ks0 = ∅ ∧ ro0 = ∅ ∧ ri0 = fi ⊖ fo, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪if err = ESUCCESS then aubifs_replaylog#(log, fi, ro0, fo, fs, log, boolvar; err, ri0); if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ro0, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ ro0 = ∅ ∧ boolvar)) |
boolvar ↔ true, err = ESUCCESS, fo.inodes?, replay-safe(log, fs, fi ⊖ fo), err = ESUCCESS → ks0 = ∅ ∧ ro0 = ∅ ∧ ri0 = fi ⊖ fo, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪aubifs_replaylog#(log, fi, ro0, fo, fs, log, boolvar; err, ri0); if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ro0, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ ro0 = ∅ ∧ boolvar))
boolvar ↔ true, fo.inodes?, replay-safe(log, fs, fi ⊖ fo), err = ESUCCESS → ks0 = ∅ ∧ ro0 = ∅ ∧ ri0 = fi ⊖ fo, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪skip; if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ro0, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ ro0 = ∅ ∧ boolvar)), err = ESUCCESS