| err = err1, m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ⟨if err = ESUCCESS then isbad := apebs[m].bad else isbad := ?⟩ ((isbad1 ↔ isbad) ∧ err1 = err) |
err = err1, m < # apebs, abs(pebs, apebs), mtd-cons(pebs), ubi-io-inv(apebs), ⌊err1⌋ ⊦ ⟨isbad := ?⟩ ((isbad1 ↔ isbad) ∧ err1 = err)
Used simplifier rules: ⊦ ⌊err⌋ → err ≠ ESUCCESS; (s)