| (ino = m ⊃ mkfile(m1, md1, # links(m, dirs), content0 upto min(n, m2));mkfile(m0, md, m3, content)) = mkfile(m4, md0, m5, content1), dirs[ino] = mkdir(m6, md2, m7, m8, entries), files0[m] = mkfile(m1, md1, # links(m, dirs), content0), files0[ino] = mkfile(m0, md, m3, content), afs-cons(dirs, files0), ROOT_INO ∈ dirs, m ∈ files0, ino ∈ dirs ∧ name ∈ entries → entries[name] ∈ dirs ∨ entries[name] ∈ files0, ino ∈ files0 → ¬ ino ∈ dirs ∧ m3 = # links(ino, dirs), ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → entries = ∅, buf-opt.some? → # buf-opt.buf = VFS_PAGE_SIZE, ino ∈ dirs → m7 = # links(ino, dirs) ∧ # links(ino, dirs) ≤ 1 ∧ m6 = # entries ∧ m8 = # subdirs(ino, dirs) ⊦ (ino ∈ files0 → ¬ ino ∈ dirs ∧ m5 = # links(ino, dirs)) ∧ (ino ∈ files0 ∧ n0 ∈ content1 → # content1[n0] = VFS_PAGE_SIZE), m2 ≤ n ∧ m2 % VFS_PAGE_SIZE ≠ 0 ∧ (m2 / VFS_PAGE_SIZE ∈ content0 ∨ buf-opt.some?) |
Used simplifier rules: ⊦ mkfile(m, md, m0, content) = mkfile(m1, md0, m2, content0) ↔ m = m1 ∧ md = md0 ∧ m0 = m2 ∧ content = content0; (ws)%⊦ afs-cons(dirs, files) ∧ ino ∈ files ∧ files[ino] = mkfile(m, md, n0, content) ∧ n ∈ content → # content[n] = VFS_PAGE_SIZE; (s)%afs-cons-file-nlink: ⊦ afs-cons(dirs, files) ∧ ino ∈ files ∧ files[ino] = mkfile(m, md, n, content) → # links(ino, dirs) = n; (forward) from specification afs-base% ⊦ m ∈ content upto n ↔ m * VFS_PAGE_SIZE < n ∧ m ∈ content; (s)%mult-a: ⊦ m0 * m * n = (m0 * m) * n; from specification nat-mult%mult-c: ⊦ m * n = n * m; from specification nat-mult%⊦ m * VFS_PAGE_SIZE < n ∧ m ∈ content → (content upto n)[m] = content[m]; (s)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic% ⊦ m < n → n ≠ 0; (s) Used formulas: ino = m