[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 76 from proof inv-truncate-buff-none-uncached (previous step)

VFS_PAGE_SIZE = n0 + m2 % VFS_PAGE_SIZE, files1[m] = mkfile(m1, md1, # links(m, dirs), content0), err = ESUCCESS, m2 % VFS_PAGE_SIZE ≠ 0, afs-cons (dirs, files1 [m, mkfile(n, md, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]), afs-cons(dirs, files1), dcache-cons(dcache, dirs, files1), icache-cons(icache, dirs, files1), pcache-cons(pcache, dirs, files1), synced(dirs, icache, pcache), m ∈ files1, m2 / VFS_PAGE_SIZE ∈ content0, m2 ≤ n, ¬ datakey(m, m2 / VFS_PAGE_SIZE) ∈ pcache, asynced2 → synced(files1, icache, pcache) ⊦ ⟪icache_set# (mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size), false ; err, icache); pcache_truncate# ((m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size) ) .ino, m2, n ; err, pcache); inode := mkinode(m, md, false, # links(m, dirs), 0, n); ino := m; files := files1 [m, mkfile(m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]; asynced4 := true; if asynced4 then pcache_set# ((m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, (m = ino ∧ ino ∈ files ⊃ (files[ino].size:= inode.size).meta:= inode.meta;files[m]).meta, false, (m = ino ∧ ino ∈ files ⊃ (files[ino].size:= inode.size).meta:= inode.meta;files[m]).nlink, 0, (m = ino ∧ ino ∈ files ⊃ (files[ino].size:= inode.size).meta:= inode.meta;files[m]).size) ) .ino, m2 / VFS_PAGE_SIZE, some(fill(files1[m].content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)).buf, false ; err, pcache); if ¬ asynced4 ∨ err ≠ ESUCCESS then buf-opt := none⟫ ( icache-cons(icache, dirs, files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta]) ∧ dcache-cons(dcache, dirs, files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta]) ∧ pcache-cons(pcache, dirs, files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta]) ∧ synced(dirs, icache, pcache) ∧ (asynced2 → synced(files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta], icache, pcache)))

Heuristic elimination applied rule insert elim lemma

And obtained the following new goals

Proof step 77:
(m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size) ) = mkinode(m0, md0, boolvar, m3, m4, m5), VFS_PAGE_SIZE = n0 + m2 % VFS_PAGE_SIZE, files1[m] = mkfile(m1, md1, # links(m, dirs), content0), err = ESUCCESS, afs-cons(dirs, files1), afs-cons (dirs, files1 [m, mkfile(n, md, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]), dcache-cons(dcache, dirs, files1), icache-cons(icache, dirs, files1), pcache-cons(pcache, dirs, files1), synced(dirs, icache, pcache), m2 / VFS_PAGE_SIZE ∈ content0, m ∈ files1, m2 ≤ n, asynced2 → synced(files1, icache, pcache) ⊦ ⟪icache_set# (mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size), false ; err, icache); pcache_truncate#(m0, m2, n; err, pcache); inode := mkinode(m, md, false, # links(m, dirs), 0, n); ino := m; files := files1 [m, mkfile(m1, md1, # links(m, dirs), content0[m2 / VFS_PAGE_SIZE, fill(content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ]; asynced4 := true; if asynced4 then pcache_set# ((m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, (m = ino ∧ ino ∈ files ⊃ (files[ino].size:= inode.size).meta:= inode.meta;files[m]).meta, false, (m = ino ∧ ino ∈ files ⊃ (files[ino].size:= inode.size).meta:= inode.meta;files[m]).nlink, 0, (m = ino ∧ ino ∈ files ⊃ (files[ino].size:= inode.size).meta:= inode.meta;files[m]).size) ) .ino, m2 / VFS_PAGE_SIZE, some(fill(files1[m].content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)).buf, false ; err, pcache); if ¬ asynced4 ∨ err ≠ ESUCCESS then buf-opt := none⟫ ( icache-cons(icache, dirs, files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta]) ∧ dcache-cons(dcache, dirs, files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta]) ∧ pcache-cons(pcache, dirs, files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta]) ∧ synced(dirs, icache, pcache) ∧ (asynced2 → synced(files[ino, (ino ∈ files ⊃ files[ino].size:= inode.size;files[ino]).meta:= inode.meta], icache, pcache))), m2 % VFS_PAGE_SIZE = 0, datakey(m, m2 / VFS_PAGE_SIZE) ∈ pcache

Rule argument

spec: inode name: elim seq: ⊦ ( ( ( (m = inode.ino ∧ md = inode.meta) ∧ (boolvar ↔ inode.directory)) ∧ m0 = inode.nlink) ∧ m1 = inode.nsubdirs) ∧ m2 = inode.size ↔ inode = mkinode(m, md, boolvar, m0, m1, m2) subst: [inode, m, md, boolvar, m0, m1, m2] → [(m ∈ dirs ⊃ mkinode (m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0 [m2 / VFS_PAGE_SIZE, fill (content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0) ] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0 [m2 / VFS_PAGE_SIZE, fill (content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0) ] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0 [m2 / VFS_PAGE_SIZE, fill (content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0) ] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size) ), m0, md0, boolvar, m3, m4, m5]

Additional information

Used simplifier rules: ⊦ ( ( ( (m = inode.ino ∧ md = inode.meta) ∧ (boolvar ↔ inode.directory)) ∧ m0 = inode.nlink) ∧ m1 = inode.nsubdirs) ∧ m2 = inode.size ↔ inode = mkinode(m, md, boolvar, m0, m1, m2); (elim) Used terms: (m ∈ dirs ⊃ mkinode (m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0 [m2 / VFS_PAGE_SIZE, fill (content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0) ] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0 [m2 / VFS_PAGE_SIZE, fill (content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0) ] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md1, # links(m, dirs), content0 [m2 / VFS_PAGE_SIZE, fill (content0[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0) ] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size) ), m0, md0, boolvar, m3, m4, m5