| ⟨fail_or_success#(; ; err)⟩ (err = err2), # lpt3 = # avol, # lpt1 = # avol, isbuf ↔ isbuf0, [] = nx1, adr = adr1, adr0 = adr3, adr0 = adr2, err2 = ESUCCESS, err2 = err1, lpt = lpt1, lpt0 = lpt3, lpt0 = lpt2, m = m1, m0 = m3, m0 = m2, ns = ns5, ns0 = ns4, ns0 = ns3, ns1 = ns2, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then {adr1 := adr3; m1 := m3; nx := []; lpt1 := lpt3; ns5 := ns4} else isbuf := true; ns4 := ?⟩ (adr2 = adr1 ∧ m2 = m1 ∧ nx1 = nx ∧ lpt2 = lpt1 ∧ ns3 = ns5), adr2 = adr1 ∧ m2 = m1 ∧ nx1 = nx ∧ lpt2 = lpt1 ∧ ns3 = ns5 |
⟨fail_or_success#(; ; err)⟩ (err = ESUCCESS), # lpt1 = # avol, # lpt3 = # avol, awbuf-inv(avol, bleb), synced(avol), avol0 ↓ avol ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then {adr1 := adr3; m1 := m3; nx := []; lpt1 := lpt3; ns5 := ns4} else isbuf := true; ns := ?⟩ (adr3 = adr1 ∧ m3 = m1 ∧ [] = nx ∧ lpt3 = lpt1 ∧ ns4 = ns5), adr3 = adr1 ∧ m3 = m1 ∧ [] = nx ∧ lpt3 = lpt1 ∧ ns4 = ns5