| pebs[m] = mkpeb(buf, m0, boolvar), m < # apebs, m < # pebs, abs(pebs, apebs), abs-peb(mkpeb(buf, m0, boolvar), apebs[m]), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then isbad := apebs[m].bad else isbad := ?⟩ ((boolvar ↔ isbad) ∧ ESUCCESS = err) |
pebs[m] = mkpeb(buf, m0, boolvar), m < # pebs, m < # apebs, abs(pebs, apebs), abs-peb(mkpeb(buf, m0, boolvar), apebs[m]), mtd-cons(pebs), ubi-io-inv(apebs) ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then isbad := apebs[m].bad else isbad := ?⟩ ((boolvar ↔ isbad) ∧ ESUCCESS = err)