| ebm-cons(avols), ebm-cons(avols0), avols ⊆ avols0 ⊦ (⌊EIO⌋ ∨ EIO = ESUCCESS) ∧ ⟨err := EIO; if err ≠ ESUCCESS then avols := ?⟩ (avols ⊆ avols0) |
ebm-cons(avols0), ebm-cons(avols), avols ⊆ avols0 ⊦ ⟨err := EIO; if err ≠ ESUCCESS then avols := ?⟩ (avols ⊆ avols0)
Used simplifier rules: ⊦ ⌊EIO⌋ ; (s)