| m < # pebs, mtd-cons(pebs) ⊦ ⟪mtd_asm_isbad#(m, pebs; ; isbad, err)⟫ true |
m < # pebs, mtd-cons(pebs) ⊦ ⟪if m < # pebs then {fail_or_success#(; ; err); if err = ESUCCESS then isbad := pebs[m].bad else isbad := ?} else abort⟫ true
Used simplifier rules: isbad: ⊦ ;