| ro.inodes?, fo.inodes?, log-cons(log, fs), node-cons(nd.key, nd), ri-cons(ri, fs), ri-inj(ri), ri-inj(fi) ⊦ ⟨fail#(; ; err); adr := ?; boolvar := ?⟩ boolvar, adr ∈ fs ∧ ⟨err := ENOSPC; boolvar := ?⟩ boolvar, ∃ adr0. ¬ adr0 ∈ fs ∧ ⟨adr := adr0; fs1 := fs[adr, nd], log1 := log + adr ', err := ESUCCESS; boolvar := ?⟩ (boolvar ∧ fs = fs1 ∧ log = log1) |
fo.inodes?, ro.inodes?, log-cons(log, fs), node-cons(nd.key, nd), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri) ⊦ ⟨fail#(; ; err); adr := ?; boolvar := ?⟩ boolvar