[Imprint][Data Privacy Statement][E-Mail]



View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 93 from proof truncate-greater (previous step)

files1[m0] = mkfile(m, md0, # links(m0, dirs), content0), files = files1[m0, mkfile(m, md0, # links(m0, dirs), content0 upto m3)], ino = inode.ino, inode = mkinode(m0, md, false, # links(m0, dirs), 0, n), inode0 = mkinode(m0, md, false, # links(m0, dirs), 0, m3), m3 < n, afs-cons(dirs, files1), m0 ∈ files1, ino ∈ files ⊦ [err := ESUCCESS; asynced := ?] (err = ESUCCESS ⊃ files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .content .stream to files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .size = ( files1 [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .content .stream to m3) + ( σ⊥ to ( files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino] .nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .size - m3)) ∧ (inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ∈ files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] ∧ n = files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .size ∧ files1 [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .nlink = files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] [(inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ] .nlink ∧ files1 -- (inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino = files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] -- (inode0.ino ∈ dirs ⊃ mkinode(inode0.ino, dirs[inode0.ino].meta, true, dirs[inode0.ino].nlink, dirs[inode0.ino].nsubdirs, dirs[inode0.ino].size) ;mkinode (inode0.ino, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][inode0.ino].size) ) .ino ;⌊err⌋ ∧ files1 = files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] ), m3 % VFS_PAGE_SIZE ≠ 0 ∧ m3 / VFS_PAGE_SIZE ∈ content0

Heuristic symbolic execution applied rule assign right

And obtained the following new goals

Rule argument

Additional information