[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 77 from proof inv-rename-dir-dentry (previous step)

# links(entries2[str], dirs0) = dirs0[entries2[str]].nlink, dirs0[entries2[str]].entries = ∅, dirs0[entries0[str0]] = mkdir(m3, md4, # links(entries0[str0], dirs0), m5, entries), dirs0[entries2[str]] = mkdir(dirs0[entries2[str]].size, md6, dirs0[entries2[str]].nlink, dirs0[entries2[str]].nsubdirs, ∅), dirs0[m] = mkdir(m4, md3, # links(m, dirs0), m7, entries2), dirs0[m0] = mkdir(m1 + 1, md0, # links(m0, dirs0), m2 + 1, entries0), dirs = dirs0[m0, mkdir(m1, md0, # links(m0, dirs0), m2, entries0 -- str0)] [m, (m = m0 ⊃ mkdir(m1, md0, # links(m0, dirs0), m2, entries0 -- str0);mkdir(m4, md3, # links(m, dirs0), m7, entries2)) .entries:= (m = m0 ⊃ mkdir(m1, md0, # links(m0, dirs0), m2, entries0 -- str0);mkdir(m4, md3, # links(m, dirs0), m7, entries2)).entries [str, entries0[str0] ] ], entries2[str] ≠ ROOT_INO, afs-cons(dirs0, files), dcache-cons(dcache, dirs0, files), icache-cons(icache, dirs0, files), pcache-cons(pcache, dirs0, files), synced(dirs0, icache, pcache), str0 ∈ entries0, entries2[str] ∈ dirs0, entries0[str0] ∈ dirs0, m ∈ dirs0, m0 ∈ dirs0, str ∈ entries2, asynced2 → synced(files, icache, pcache), m = m0 → md1 = md2, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO ⊦ [afs_drop_nlink#(mkdentry(str, entries2[str]).ino; dirs, files); old_dent := mkdentry(str0, entries0[str0]); asynced1 := true; if ¬ asynced1 then {dirs[m].size := dirs[m].size + 1; if old_dent.ino ∈ dirs then dirs[m].nsubdirs := dirs[m].nsubdirs + 1}; new_dent := mkdentry(mkdentry(str, entries2[str]).name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m0, md2, true, # links(m0, dirs0), m2 + 1, m1 + 1); dirs, files); afs_inode_sync#(mkinode(m, md1, true, # links(m, dirs0), m7, m4); dirs, files); new_child_inode := mkinode(entries2[str], md, true, # links(entries2[str], dirs0), dirs0[entries2[str]].nsubdirs, dirs0[entries2[str]].size); if asynced1 then {afs_inode_sync#(new_child_inode; dirs, files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, files[new_child_inode.ino].meta, false, files[new_child_inode.ino].nlink, 0, files[new_child_inode.ino].size) )}; old_parent_inode := (m0 ∈ dirs ⊃ mkinode(m0, dirs[m0].meta, true, dirs[m0].nlink, dirs[m0].nsubdirs, dirs[m0].size) ;mkinode(m0, files[m0].meta, false, files[m0].nlink, 0, files[m0].size) ); new_parent_inode := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode(m, files[m].meta, false, files[m].nlink, 0, files[m].size) ); err := ESUCCESS; asynced := ?] ( afs-cons(dirs, files) → ⟪if err = ESUCCESS then let asynced = false in {icache_set#(old_parent_inode, asynced; err, icache); icache_set#(new_parent_inode, asynced; err, icache); if true then icache_set#(new_child_inode, asynced; err, icache); dcache_delete#(old_parent_inode.ino, old_dent.name; err, dcache); dcache_set#(new_parent_inode.ino, new_dent.name, new_dent; err, dcache)}⟫ ( icache-cons(icache, dirs, files) ∧ dcache-cons(dcache, dirs, files) ∧ pcache-cons(pcache, dirs, files) ∧ synced(dirs, icache, pcache) ∧ (asynced2 → synced(files, icache, pcache)))), m0 = m ∧ mkdentry(str, entries2[str]) = mkdentry(str0, entries0[str0])

Heuristic elimination applied rule insert elim lemma

And obtained the following new goals

Proof step 78:
# links(entries2[str], dirs0) = m8, dirs0[m0] = mkdir(m1 + 1, md0, # links(m0, dirs0), m2 + 1, entries0), dirs0[m] = mkdir(m4, md3, # links(m, dirs0), m7, entries2), dirs0[entries2[str]] = mkdir(m6, md6, m8, m9, ∅), dirs0[entries0[str0]] = mkdir(m3, md4, # links(entries0[str0], dirs0), m5, entries), dirs0[entries2[str]] = mkdir(m6, md5, m8, m9, entries1), dirs = dirs0[m0, mkdir(m1, md0, # links(m0, dirs0), m2, entries0 -- str0)] [m, (m = m0 ⊃ mkdir(m1, md0, # links(m0, dirs0), m2, entries0 -- str0);mkdir(m4, md3, # links(m, dirs0), m7, entries2)) .entries:= (m = m0 ⊃ mkdir(m1, md0, # links(m0, dirs0), m2, entries0 -- str0);mkdir(m4, md3, # links(m, dirs0), m7, entries2)).entries [str, entries0[str0] ] ], entries1 = ∅, afs-cons(dirs0, files), dcache-cons(dcache, dirs0, files), icache-cons(icache, dirs0, files), pcache-cons(pcache, dirs0, files), synced(dirs0, icache, pcache), str ∈ entries2, m0 ∈ dirs0, m ∈ dirs0, entries0[str0] ∈ dirs0, entries2[str] ∈ dirs0, str0 ∈ entries0, m = m0 → md1 = md2, asynced2 → synced(files, icache, pcache), links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO ⊦ [afs_drop_nlink#(mkdentry(str, entries2[str]).ino; dirs, files); old_dent := mkdentry(str0, entries0[str0]); asynced1 := true; if ¬ asynced1 then {dirs[m].size := dirs[m].size + 1; if old_dent.ino ∈ dirs then dirs[m].nsubdirs := dirs[m].nsubdirs + 1}; new_dent := mkdentry(mkdentry(str, entries2[str]).name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m0, md2, true, # links(m0, dirs0), m2 + 1, m1 + 1); dirs, files); afs_inode_sync#(mkinode(m, md1, true, # links(m, dirs0), m7, m4); dirs, files); new_child_inode := mkinode(entries2[str], md, true, # links(entries2[str], dirs0), m9, m6); if asynced1 then {afs_inode_sync#(new_child_inode; dirs, files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, files[new_child_inode.ino].meta, false, files[new_child_inode.ino].nlink, 0, files[new_child_inode.ino].size) )}; old_parent_inode := (m0 ∈ dirs ⊃ mkinode(m0, dirs[m0].meta, true, dirs[m0].nlink, dirs[m0].nsubdirs, dirs[m0].size) ;mkinode(m0, files[m0].meta, false, files[m0].nlink, 0, files[m0].size) ); new_parent_inode := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode(m, files[m].meta, false, files[m].nlink, 0, files[m].size) ); err := ESUCCESS; asynced := ?] ( afs-cons(dirs, files) → ⟪if err = ESUCCESS then let asynced = false in {icache_set#(old_parent_inode, asynced; err, icache); icache_set#(new_parent_inode, asynced; err, icache); if true then icache_set#(new_child_inode, asynced; err, icache); dcache_delete#(old_parent_inode.ino, old_dent.name; err, dcache); dcache_set#(new_parent_inode.ino, new_dent.name, new_dent; err, dcache)}⟫ ( icache-cons(icache, dirs, files) ∧ dcache-cons(dcache, dirs, files) ∧ pcache-cons(pcache, dirs, files) ∧ synced(dirs, icache, pcache) ∧ (asynced2 → synced(files, icache, pcache)))), entries2[str] = ROOT_INO, m0 = m ∧ mkdentry(str, entries2[str]) = mkdentry(str0, entries0[str0])

Rule argument

spec: abstract-dir name: elim seq: ⊦ ( ((m = ad.size ∧ md = ad.meta) ∧ m0 = ad.nlink) ∧ m1 = ad.nsubdirs) ∧ entries = ad.entries ↔ ad = mkdir(m, md, m0, m1, entries) subst: [ad, m, md, m0, m1, entries] → [dirs0[entries2[str]], m6, md5, m8, m9, entries1]

Additional information

Used simplifier rules: ⊦ ( ((m = ad.size ∧ md = ad.meta) ∧ m0 = ad.nlink) ∧ m1 = ad.nsubdirs) ∧ entries = ad.entries ↔ ad = mkdir(m, md, m0, m1, entries); (elim) Used terms: dirs0[entries2[str]], m6, md5, m8, m9, entries1