| err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪if err = ESUCCESS then ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], boolvar0 := true else ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, boolvar0 := ?⟫ (err = ESUCCESS → boolvar0 ∧ ri-inj(ri) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro.inodes? ∧ fo.inodes?) |
err = ESUCCESS, err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪ri := ∅, fs := ∅, fi := ∅, fo := ∅, ro := ∅, log := [], boolvar0 := true⟫ (err = ESUCCESS → boolvar0 ∧ ri-inj(ri) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro.inodes? ∧ fo.inodes?)
err = err0, ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪ri := ?, fs := ?, fi := ?, fo := ?, ro := ?, log := ?, boolvar0 := ?⟫ (err = ESUCCESS → boolvar0 ∧ ri-inj(ri) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro.inodes? ∧ fo.inodes?), err = ESUCCESS