| n < # apebs, ubi-io-inv(apebs) ⊦ (⌊EIO⌋ ∨ EIO = ESUCCESS) ∧ ⟨err := EIO; if err = ESUCCESS then isbad := apebs[n].bad else isbad := ?⟩ true |
n < # apebs, ubi-io-inv(apebs) ⊦ ⟨err := EIO; if err = ESUCCESS then isbad := apebs[n].bad else isbad := ?⟩ true
Used simplifier rules: ⊦ ⌊EIO⌋ ; (s)