| ⟨fail_or_success#(; ; err)⟩ (err = ESUCCESS), # lpt = # avol, nx + m3 ' = nx1, avol[m3] = mapped(buf), m3 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then nx := nx + m3 ', bleb := buffered(m3)⟩ (nx1 = nx) |
⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0⟩ (err = ESUCCESS), # lpt = # avol, nx + m3 ' = nx1, avol[m3] = mapped(buf), m3 < # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then nx := nx + m3 ', bleb := buffered(m3)⟩ (nx1 = nx)
Used simplifier rules: fail_or_success#(; ; ERR) {choose ERR0 with ⌊ERR0⌋ ∨ ERR0 = ESUCCESS in ERR := ERR0};