| ⊦ ⟪fail_or_success#(; ; err); if err = ESUCCESS then avols := ∅ else avols := ?; if err = ESUCCESS then {v := default-volid; ebm_create_volume#(v, m; avols; err)}⟫ ( (err = ESUCCESS → ⟨ebm_avol_format#(m; ; avol0, err0)⟩ (avol0 = abs(avols[v]) ∧ ESUCCESS = err0)) ∧ (err ≠ ESUCCESS → (∀ avol. ⟨ebm_avol_format#(m; ; avol0, err0)⟩ (avol = avol0 ∧ err = err0)))) |
⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then avols := ∅ else avols := ?; if err = ESUCCESS then {v := default-volid; ebm_create_volume#(v, m; avols; err)}⟫ ( (err = ESUCCESS → ⟨ebm_avol_format#(m; ; avol0, err0)⟩ (avol0 = abs(avols[v]) ∧ ESUCCESS = err0)) ∧ (err ≠ ESUCCESS → (∀ avol. ⟨ebm_avol_format#(m; ; avol0, err0)⟩ (avol = avol0 ∧ err = err0))))
Used simplifier rules: fail_or_success#(; ; ERR) {choose ERR0 with ⌊ERR0⌋ ∨ ERR0 = ESUCCESS in ERR := ERR0};