Multistate fault-tree analysis