| root.dir?, fids-cons(root, fs, ofh), posix-crash(root, fs, ofh, tree, fs0, ofh0) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err ≠ ESUCCESS then root := ?, fs := ?, ofh := ?, psynced := ? else psynced := true⟩ (psynced ∧ posix-crash(root, fs, ofh, tree, fs0, ofh0)), ⟨err := EFAIL; if err ≠ ESUCCESS then root := ?, fs := ?, ofh := ?, psynced := ? else psynced := true⟩ (psynced ∧ posix-crash(root, fs, ofh, tree, fs0, ofh0)) |
root.dir?, fids-cons(root, fs, ofh), posix-crash(root, fs, ofh, tree, fs0, ofh0) ⊦ ⟨if EFAIL ≠ ESUCCESS then root := ?, fs := ?, ofh := ?, psynced := ? else psynced := true⟩ (psynced ∧ posix-crash(root, fs, ofh, tree, fs0, ofh0)), ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err ≠ ESUCCESS then root := ?, fs := ?, ofh := ?, psynced := ? else psynced := true⟩ (psynced ∧ posix-crash(root, fs, ofh, tree, fs0, ofh0))