| asynced3 ↔ asynced6, asynced4 ↔ asynced5, asynced2 ↔ buf-opt.some?, asynced1 ↔ false, asynced0 ↔ false, files[m] = mkfile(m0, md0, # links(m, dirs), content), buf-opt = none, err = ESUCCESS, ino = inode.ino, inode = mkinode(m, md, false, # links(m, dirs), 0, m2), pageno = m2 / VFS_PAGE_SIZE, size = inode.size, afs-cons(dirs, files), dcache-cons(dcache, dirs, files), icache-cons(icache, dirs, files), pcache-cons(pcache, dirs, files), pre-truncate(inode, n, pageno, buf-opt, dirs, files), synced(dirs, icache, pcache), m ∈ files, asynced → synced(files, icache, pcache) ⊦ ⟪pcache_check_page#(ino, pageno, pcache; asynced1, asynced0, err); if err = ESUCCESS ∧ asynced1 then pcache_get#(ino, pageno, pcache; asynced1, buf, err); if err = ESUCCESS ∧ asynced1 then buf-opt := some(buf); if err = ESUCCESS then afs_truncate#(n, pageno; buf-opt, inode, asynced4, err, dirs, files, asynced3); if err = ESUCCESS then let asynced = false in {icache_set#(inode, asynced; err, icache); pcache_truncate#(inode.ino, size, n; err, pcache); if asynced4 then pcache_set#(inode.ino, pageno, buf-opt.buf, asynced; err, pcache)}; if (¬ asynced4 ∨ err ≠ ESUCCESS) ∧ ¬ asynced2 then buf-opt := none⟫ ( icache-cons(icache, dirs, files) ∧ dcache-cons(dcache, dirs, files) ∧ pcache-cons(pcache, dirs, files) ∧ afs-cons(dirs, files) ∧ synced(dirs, icache, pcache) ∧ (asynced → synced(files, icache, pcache))), VFS_PAGE_SIZE = 0, datakey(m, m2 / VFS_PAGE_SIZE) ∈ pcache |
# links(m, dirs) = files[m].nlink, files[m] = mkfile(m0, md0, files[m].nlink, content), ¬ asynced0, ¬ asynced1, err = ESUCCESS, afs-cons(dirs, files), dcache-cons(dcache, dirs, files), icache-cons(icache, dirs, files), pcache-cons(pcache, dirs, files), synced(dirs, icache, pcache), m ∈ files, ¬ datakey(m, m2 / VFS_PAGE_SIZE) ∈ pcache, asynced → synced(files, icache, pcache) ⊦ ⟪pcache_check_page#(m, m2 / VFS_PAGE_SIZE, pcache; asynced1, asynced0, err); pageno := m2 / VFS_PAGE_SIZE; if err = ESUCCESS ∧ asynced1 then pcache_get#(m, pageno, pcache; asynced1, buf, err); buf-opt := none; if err = ESUCCESS ∧ asynced1 then buf-opt := some(buf); size := m2; inode := mkinode(m, md, false, # links(m, dirs), 0, m2); if err = ESUCCESS then afs_truncate#(n, pageno; buf-opt, inode, asynced4, err, dirs, files, asynced3); if err = ESUCCESS then let asynced = false in {icache_set#(inode, asynced; err, icache); pcache_truncate#(inode.ino, size, n; err, pcache); if asynced4 then pcache_set#(inode.ino, pageno, buf-opt.buf, asynced; err, pcache)}; if ¬ asynced4 ∨ err ≠ ESUCCESS then buf-opt := none⟫ ( icache-cons(icache, dirs, files) ∧ dcache-cons(dcache, dirs, files) ∧ pcache-cons(pcache, dirs, files) ∧ afs-cons(dirs, files) ∧ synced(dirs, icache, pcache) ∧ (asynced → synced(files, icache, pcache)))
Used simplifier rules: afs-cons-file-nlink: ⊦ afs-cons(dirs, files) ∧ ino ∈ files ∧ files[ino] = mkfile(m, md, n, content) → # links(ino, dirs) = n; (forward) from specification afs-base% ⊦ ¬ none.some?; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).size = m2; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nsubdirs = m1; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nlink = m0; (s)% ⊦ valid-file-ino(ino, dirs, files) ↔ ino ∈ files; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).ino = m; (s)%⊦ valid-file-inode(inode, dirs, files) ↔ valid-file-ino(inode.ino, dirs, files) ∧ inode.nlink = files[inode.ino].nlink ∧ inode.nsubdirs = 0 ∧ ¬ inode.directory; (s)%⊦ pre-truncate(inode, n, pageno, buf-opt, dirs, files) ↔ valid-file-inode(inode, dirs, files) ∧ pageno = inode.size / VFS_PAGE_SIZE ∧ (buf-opt.some? → # buf-opt.buf = VFS_PAGE_SIZE); (s)% ⊦ VFS_PAGE_SIZE ≠ 0; (s)