| tree0.dir?, dom of1 < ino, abs(tree0, ROOT_INO)(dirs0), afs-cons(dirs0, files1), fids-cons(tree0, abs-files(files1), abs-of(of1)), of-cons(of1, dirs0, files1), posix-crash(tree0, abs-files(files1), abs-of(of1), tree, fs2, ofh2), ⌊err1⌋ ⊦ (⌊err1⌋ ∨ err1 = ESUCCESS) ∧ ⟨err := err1; if err ≠ ESUCCESS then root := ?, fs := ?, ofh := ?, psynced := ? else psynced := true⟩ (tree1 = root ∧ fs0 = fs ∧ ofh0 = ofh ∧ (isdir ↔ psynced) ∧ err1 = err) |
tree0.dir?, dom of1 < ino, abs(tree0, ROOT_INO)(dirs0), afs-cons(dirs0, files1), fids-cons(tree0, abs-files(files1), abs-of(of1)), of-cons(of1, dirs0, files1), posix-crash(tree0, abs-files(files1), abs-of(of1), tree, fs2, ofh2), ⌊err1⌋ ⊦ ⟨err := err1; if err ≠ ESUCCESS then root := ?, fs := ?, ofh := ?, psynced := ? else psynced := true⟩ (tree1 = root ∧ fs0 = fs ∧ ofh0 = ofh ∧ (isdir ↔ psynced) ∧ err1 = err)