| ri0 = ri, err = ESUCCESS, replay-safe(ax, fs, ri) ⊦ ⟪aubifs_replaylog#(ax, fi, ro, fo, fs, log, boolvar; err, ri)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay-log(ax, fs, ri0))) |
err = ESUCCESS, ri0 = ri, replay-safe(ax, fs, ri) ⊦ ⟪aubifs_replaylog#(ax, fi, ro, fo, fs, log, boolvar; err, ri)⟫ ((err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → ri = replay-log(ax, fs, ri0)))