| m < # pebs, mtd-cons(pebs) ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then isbad := pebs[m].bad else isbad := ?⟩ true |
m < # pebs, mtd-cons(pebs) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then isbad := pebs[m].bad else isbad := ?⟩ true