| m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ⟪choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then isbad := pebs[m].bad else isbad := ?⟫ ⟨aubi_io_isbad#(m, apebs; ; isbad0, err0)⟩ ((isbad ↔ isbad0) ∧ err = err0) |
m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err0⌋ ∨ err0 = ESUCCESS ⊦ ⟪err := err0; if err = ESUCCESS then isbad := pebs[m].bad else isbad := ?⟫ ⟨aubi_io_isbad#(m, apebs; ; isbad0, err1)⟩ ((isbad ↔ isbad0) ∧ err = err1)
m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ∃ err0. ⌊err0⌋ ∨ err0 = ESUCCESS