Ambiguity in the spec

The specification seems to ignore the error case in the definition
of then. This testcase should clarify it (and indeed fails).

Signed-off-by: Christoph Höger <christoph.hoeger@tu-berlin.de>