| ⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], boolvar0 := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, boolvar0 := ?⟫ (err = ESUCCESS → boolvar0 ∧ ri-inj(ri) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro.inodes? ∧ fo.inodes?) |
⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], boolvar0 := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, boolvar0 := ?⟫ (err = ESUCCESS → boolvar0 ∧ ri-inj(ri) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro.inodes? ∧ fo.inodes?)
⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS