| dirs[m] = mkdir(m0, md0, # links(m, dirs), m2, entries), dent = negdentry(str), p_ino = m, afs-cons(dirs, files), m ∈ dirs, links(m, dirs) ≠ ∅ ∨ m = ROOT_INO ⊦ ino = 0, afs-cons (( dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]] [p_ino, dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]][p_ino] .size:= (dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]][p_ino].size + 1) ] [p_ino, dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]] [p_ino, dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]][p_ino] .size:= (dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]][p_ino].size + 1) ] [p_ino ] .nsubdirs:= ( dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]] [p_ino, dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]][p_ino] .size:= (dirs[p_ino, dirs[p_ino].entries:= dirs[p_ino].entries[dent.name, ino]][p_ino].size + 1) ] [p_ino ] .nsubdirs + 1) ] ++ ino )[ino, mkdir(0, md, 1, 0, ∅) ], files), str ∈ entries, ino ∈ dirs, ino ∈ files |
dirs[m] = mkdir(m0, md0, # links(m, dirs), m2, entries), afs-cons(dirs, files), ROOT_INO ∈ dirs, m ∈ dirs, ino0 ∈ files ∧ n ∈ files[ino0].content → # files[ino0].content[n] = VFS_PAGE_SIZE, ino0 ∈ dirs ∧ name ∈ dirs[ino0].entries → dirs[ino0].entries[name] ∈ dirs ∨ dirs[ino0].entries[name] ∈ files, ino0 ∈ files → ¬ ino0 ∈ dirs ∧ files[ino0].nlink = # links(ino0, dirs), ino0 ∈ dirs → dirs[ino0].nlink = # links(ino0, dirs) ∧ dirs[ino0].nlink ≤ 1 ∧ dirs[ino0].size = # dirs[ino0].entries ∧ dirs[ino0].nsubdirs = # subdirs(ino0, dirs), ino0 ∈ dirs ∧ ino0 ≠ ROOT_INO ∧ links(ino0, dirs) = ∅ → dirs[ino0].entries = ∅, links(m, dirs) ≠ ∅ ∨ m = ROOT_INO ⊦ ino = 0, str ∈ entries, ino ∈ dirs, ino ∈ files, ( (ino0 = ino ∨ ino0 ∈ dirs) ∧ ino0 ≠ ROOT_INO ∧ links(ino0, (dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino, mkdir(0, md, 1, 0, ∅)]) = ∅ → (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).entries = ∅) ∧ ( ino0 = ino ∨ ino0 ∈ dirs → ¬ ino0 ∈ files ∧ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).nlink = # links(ino0, (dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino, mkdir(0, md, 1, 0, ∅)]) ∧ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).nlink ≤ 1 ∧ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).size = # (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).entries ∧ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).nsubdirs = # subdirs(ino0, (dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino, mkdir(0, md, 1, 0, ∅)])) ∧ ( ino0 ∈ files → ¬ ino0 ∈ dirs ∧ files[ino0].nlink = # links(ino0, (dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino, mkdir(0, md, 1, 0, ∅)])) ∧ ( (ino0 = ino ∨ ino0 ∈ dirs) ∧ name ∈ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).entries → (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).entries [name ] = ino ∨ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).entries [name ] ∈ dirs ∨ (ino0 = ino ⊃ mkdir(0, md, 1, 0, ∅);(dirs[m, mkdir(m0 + 1, md0, # links(m, dirs), m2 + 1, entries[str, ino])] ++ ino)[ino0]).entries [name ] ∈ files)
Used simplifier rules: afs-cons-reduce: ⊦ afs-cons(dirs0, files0) → ( afs-cons(dirs1, files1) ↔ (∀ ino, name, n. ROOT_INO ∈ dirs0 ∧ ( ino ∈ dirs0 ∧ ino ≠ ROOT_INO ∧ links(ino, dirs0) = ∅ → dir-empty(ino, dirs0, files0)) ∧ ( ino ∈ dirs0 → ¬ ino ∈ files0 ∧ dirs0[ino].nlink = # links(ino, dirs0) ∧ dirs0[ino].nlink ≤ 1 ∧ dirs0[ino].size = # dirs0[ino].entries ∧ dirs0[ino].nsubdirs = # subdirs(ino, dirs0)) ∧ ( ino ∈ files0 → ¬ ino ∈ dirs0 ∧ files0[ino].nlink = # links(ino, dirs0)) ∧ ( ino ∈ dirs0 ∧ name ∈ dirs0[ino].entries → valid-ino(dirs0[ino].entries[name], dirs0, files0)) ∧ ( ino ∈ files0 ∧ n ∈ files0[ino].content → valid-pagesize(ino, n, files0)) → ROOT_INO ∈ dirs1 ∧ ( ino ∈ dirs1 ∧ ino ≠ ROOT_INO ∧ links(ino, dirs1) = ∅ → dir-empty(ino, dirs1, files1)) ∧ ( ino ∈ dirs1 → ¬ ino ∈ files1 ∧ dirs1[ino].nlink = # links(ino, dirs1) ∧ dirs1[ino].nlink ≤ 1 ∧ dirs1[ino].size = # dirs1[ino].entries ∧ dirs1[ino].nsubdirs = # subdirs(ino, dirs1)) ∧ ( ino ∈ files1 → ¬ ino ∈ dirs1 ∧ files1[ino].nlink = # links(ino, dirs1)) ∧ ( ino ∈ dirs1 ∧ name ∈ dirs1[ino].entries → valid-ino(dirs1[ino].entries[name], dirs1, files1)) ∧ ( ino ∈ files1 ∧ n ∈ files1[ino].content → valid-pagesize(ino, n, files1))));% ⊦ afs-cons(dirs, files) → ROOT_INO ∈ dirs; (ss)%ino ≠ 0, ¬ ino ∈ dirs ⊦ ino0 ∈ dirs ++ ino ↔ ino0 = ino ∨ ino0 ∈ dirs; (s)%⊦ mkdir(m, md, m0, m1, entries).nsubdirs:= m4 = mkdir(m, md, m0, m4, entries); (s)% ⊦ mkdir(m, md, m0, m1, entries).nsubdirs = m1; (s)%⊦ mkdir(m, md, m0, m1, entries).size:= m2 = mkdir(m2, md, m0, m1, entries); (s)% ⊦ mkdir(m, md, m0, m1, entries).size = m; (s)%⊦ mkdir(m, md, m0, m1, entries).entries:= entries0 = mkdir(m, md, m0, m1, entries0); (s)% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)% ⊦ ino ∈ dirs[ino0, ad] ↔ ino ∈ dirs; (s)%⊦ valid-pagesize(ino, n, files) ↔ # files[ino].content[n] = VFS_PAGE_SIZE; (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)% ⊦ afs-cons(dirs, files) ∧ ino ∈ dirs → ¬ ino ∈ files; (s)% ⊦ dir-empty(ino, dirs, files) ↔ dirs[ino].entries = ∅; (s)% ⊦ (ad.entries:= entries).nsubdirs = ad.nsubdirs; (s)% ⊦ (ad.size:= m).nsubdirs = ad.nsubdirs; (s)% ⊦ dirs[ino, ad][ino, ad0] = dirs[ino, ad0]; (s)% ⊦ (ad.entries:= entries).size = ad.size; (s)% ⊦ dirs[ino, ad][ino0] = (ino0 = ino ∧ ino ∈ dirs ⊃ ad;dirs[ino0]); (s)% ⊦ negdentry(str).name = str; (s)