fix value in ensures clause