| err = ESUCCESS, ri0 = fi ⊖ fo, fo.inodes?, replay-safe(log, fs, fi ⊖ fo) ⊦ ∀ err, ri0. (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo)) → ⟪boolvar := true; if err = ESUCCESS then aubifs_core_journal_sync#(ri0, fi, ∅, fo, fs, log; ; boolvar, err)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri0 = replay-log(log, fs, fi ⊖ fo) ∧ boolvar)) |
fo.inodes?, replay-safe(log, fs, fi ⊖ fo), err0 = ESUCCESS → ri = replay-log(log, fs, fi ⊖ fo), err0 = ESUCCESS ∨ ⌊err0⌋ ⊦ ⟪boolvar := true; if err0 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ∅, fo, fs, log; ; boolvar, err0)⟫ ((err0 = ESUCCESS ∨ ⌊err0⌋ ) ∧ (err0 = ESUCCESS → ri = replay-log(log, fs, fi ⊖ fo) ∧ boolvar))