| ⌊err1⌋ ⊦ (⌊err1⌋ ∨ err1 = ESUCCESS) ∧ ⟨err := err1; if err = ESUCCESS then pstate := unbuffered, isbuf := true, maxino := m, ns := ∅, log := [], gstore0 := ∅, gstore := ∅, istore0 := ∅, istore := ∅, ginval := ∅, adr := ? else pstate := ?, isbuf := ?, maxino := ?, ns := ?, log := ?, gstore0 := ?, gstore := ?, istore0 := ?, istore := ?, ginval := ?, adr := ?⟩ ( adr0 = adr ∧ istore3 = istore0 ∧ istore4 = istore ∧ ns0 = ginval ∧ gstore3 = gstore0 ∧ gstore4 = gstore ∧ log0 = log ∧ m = maxino ∧ ns1 = ns ∧ pstate1 = pstate ∧ (isbuf0 ↔ isbuf) ∧ err1 = err) |
⌊err1⌋ ⊦ ⟨err := err1; if err = ESUCCESS then pstate := unbuffered, isbuf := true, maxino := m, ns := ∅, log := [], gstore0 := ∅, gstore := ∅, istore0 := ∅, istore := ∅, ginval := ∅, adr := ? else pstate := ?, isbuf := ?, maxino := ?, ns := ?, log := ?, gstore0 := ?, gstore := ?, istore0 := ?, istore := ?, ginval := ?, adr := ?⟩ ( adr0 = adr ∧ istore3 = istore0 ∧ istore4 = istore ∧ ns0 = ginval ∧ gstore3 = gstore0 ∧ gstore4 = gstore ∧ log0 = log ∧ m = maxino ∧ ns1 = ns ∧ pstate1 = pstate ∧ (isbuf0 ↔ isbuf) ∧ err1 = err)