| ⌊err0⌋ ⊦ ⟨choose err0 with ⌊err0⌋ ∨ err0 = ESUCCESS in err := err0; if err = ESUCCESS then {avol := fill(mkavolume(# lpt0), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅; bleb := nobuffer; rofs := false} else avol := ?, bleb := ?, rofs := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟩ (adr2 = adr ∧ m3 = m ∧ plog0 = plog ∧ avol0 = avol ∧ lpt1 = lpt ∧ ns0 = ns ∧ bleb0 = bleb ∧ (rofs0 ↔ rofs) ∧ err0 = err) |
⌊err1⌋ ⊦ ∃ err0. (⌊err0⌋ ∨ err0 = ESUCCESS) ∧ ⟨err := err0; if err = ESUCCESS then {avol := fill(mkavolume(# lpt0), unmapped); adr := adr0; m := m0; plog := []; lpt := lpt0; ns := ∅; bleb := nobuffer; rofs := false} else avol := ?, bleb := ?, rofs := ?, adr := ?, m := ?, plog := ?, lpt := ?, ns := ?⟩ (adr2 = adr ∧ m3 = m ∧ plog0 = plog ∧ avol0 = avol ∧ lpt1 = lpt ∧ ns0 = ns ∧ bleb0 = bleb ∧ (rofs0 ↔ rofs) ∧ err1 = err)