| boolvar0 ↔ true, boolvar ↔ boolvar1, fo.inodes?, ro.inodes?, log-cons(log, fs), ri-inj(fi), ri-inj(ri) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then boolvar := key ∈ ri else boolvar := ?⟩ true |
ro.inodes?, fo.inodes?, log-cons(log, fs), ri-inj(ri), ri-inj(fi) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then boolvar := key ∈ ri else boolvar := ?⟩ true