| m < # pebs, mtd-cons(pebs) ⊦ ⟪if m < # pebs then mtd_asm_isbad#(m, pebs; ; isbad, err) else abort⟫ true |
m < # pebs, mtd-cons(pebs) ⊦ ⟪mtd_asm_isbad#(m, pebs; ; isbad, err)⟫ true
Used simplifier rules: ⊦ m < n ↔ ¬ n ≤ m; (ss)% ⊦ m < n → (n ≤ m ↔ false); (s)