| boolvar ↔ true, err = ESUCCESS, fo.inodes?, replay-safe(log, fs, fi ⊖ fo), err = ESUCCESS → ks0 = ∅ ∧ ro0 = ∅ ∧ ri0 = fi ⊖ fo, err = ESUCCESS ∨ ⌊err⌋ ⊦ ⟪aubifs_replaylog#(log, fi, ro0, fo, fs, log, boolvar; err, ri0); if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ro0, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ ro0 = ∅ ∧ boolvar)) |
err = ESUCCESS, ri0 = fi ⊖ fo, fo.inodes?, replay-safe(log, fs, fi ⊖ fo) ⊦ ⟪aubifs_replaylog#(log, fi, ∅, fo, fs, log, true; err, ri0); boolvar := true; if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ∅, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ boolvar))