| ⌊err1⌋ ⊦ ⟨err := err1; if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟩ (avol1 = avol ∧ err1 = err) |
err = err1, ⌊err1⌋ ⊦ ⟨if err = ESUCCESS then avol := fill(mkavolume(m), unmapped) else avol := ?⟩ (avol1 = avol ∧ err1 = err)