| apebs[n] = mkpeb(empty, avhdr, buf, m, false), aehdr.valid?, n < # apebs, ubi-io-inv(apebs) ⊦ (⌊EIO⌋ ∨ EIO = ESUCCESS) ∧ ⟨err := EIO; apebs0 := apebs; if err = ESUCCESS then apebs[n].echdr := aehdr else choose aehdr with ¬ aehdr.valid? in apebs[n].echdr := aehdr⟩ (apebs0 = apebs) |
apebs[n] = mkpeb(empty, avhdr, buf, m, false), aehdr.valid?, n < # apebs, ubi-io-inv(apebs) ⊦ ⟨err := EIO; apebs0 := apebs; if err = ESUCCESS then apebs[n].echdr := aehdr else choose aehdr with ¬ aehdr.valid? in apebs[n].echdr := aehdr⟩ (apebs0 = apebs)
Used simplifier rules: ⊦ ⌊EIO⌋ ; (s)