| # links(entries0[str], cache_dirs) = cache_dirs[entries0[str]].nlink, # links(m3, cache_dirs) = m4, # links(m, cache_dirs) = cache_dirs[m].nlink, # links(entries1[str0], cache_dirs) = cache_dirs[entries1[str0]].nlink, cache_dirs[entries0[str]].entries = ∅, cache_dirs[m3] = mkdir(m0 + 1, md7, m4, m1 + 1, entries1), cache_dirs[m] = mkdir(cache_dirs[m].size, md5, cache_dirs[m].nlink, cache_dirs[m].nsubdirs, entries0), cache_dirs[entries0[str]] = mkdir(cache_dirs[entries0[str]].size, md4, cache_dirs[entries0[str]].nlink, cache_dirs[entries0[str]].nsubdirs, ∅), cache_dirs[entries1[str0]] = mkdir(cache_dirs[entries1[str0]].size, md3, cache_dirs[entries1[str0]].nlink, cache_dirs[entries1[str0]].nsubdirs, entries2), entries0[str] = cache_dirs[m].entries[str], entries1[str0] = entries[str0], cache_dirs[m3] = mkdir(m2, md2, m4, m5, entries), afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache, dirs = cache_dirs[m3, ((cache_dirs[m3].entries:= (entries -- str0)).size:= m0).nsubdirs:= m1] [m, (m = m3 ⊃ ((cache_dirs[m3].entries:= (entries -- str0)).size:= m0).nsubdirs:= m1;cache_dirs[m]) .entries:= (m = m3 ⊃ ((cache_dirs[m3].entries:= (entries -- str0)).size:= m0).nsubdirs:= m1;cache_dirs[m]).entries[str, entries1[str0]] ], m2 = m0 + 1, m5 = m1 + 1, afs-cons(cache_dirs, (cache_files ⊕ cache_pcache) ⊕ cache_icache), afs-cons(cache_dirs, cache_files), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache), entries1[str0] ∈ cache_dirs, str0 ∈ entries1, m3 ∈ cache_dirs, m ∈ cache_dirs, entries0[str] ∈ cache_dirs, str ∈ cache_dirs[m].entries, str0 ∈ entries, str ∈ entries0, ⌊err0⌋ , m = m3 → md = md0, cache_sync → synced(cache_files, cache_icache, cache_pcache), links(m3, cache_dirs) ≠ ∅ ∨ m3 = ROOT_INO, links(m, cache_dirs) ≠ ∅ ∨ m = ROOT_INO ⊦ ⟨afs_drop_nlink#(mkdentry(str, entries0[str]).ino; dirs, afs_files); old_dent := mkdentry(str0, entries1[str0]); asynced1 := true; if ¬ asynced1 then {dirs[m].size := dirs[m].size + 1; if old_dent.ino ∈ dirs then dirs[m].nsubdirs := dirs[m].nsubdirs + 1}; new_dent := mkdentry(mkdentry(str, entries0[str]).name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m3, md0, true, m4, m1 + 1, m0 + 1); dirs, afs_files); afs_inode_sync#(mkinode(m, md, true, # links(m, cache_dirs), cache_dirs[m].nsubdirs, cache_dirs[m].size); dirs, afs_files); new_child_inode := mkinode(entries0[str], md1, true, # links(entries0[str], cache_dirs), cache_dirs[entries0[str]].nsubdirs, cache_dirs[entries0[str]].size); if asynced1 then {afs_inode_sync#(new_child_inode; dirs, afs_files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, afs_files[new_child_inode.ino].meta, false, afs_files[new_child_inode.ino].nlink, 0, afs_files[new_child_inode.ino].size) )}; old_parent_inode := (m3 ∈ dirs ⊃ mkinode(m3, dirs[m3].meta, true, dirs[m3].nlink, dirs[m3].nsubdirs, dirs[m3].size) ;mkinode(m3, afs_files[m3].meta, false, afs_files[m3].nlink, 0, afs_files[m3].size) ); new_parent_inode := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode(m, afs_files[m].meta, false, afs_files[m].nlink, 0, afs_files[m].size) ); err := ESUCCESS; asynced := ?⟩ ( mkinode(m3, md0, true, # links(m3, cache_dirs), m1 + 1, m0 + 1) = old_parent_inode ∧ mkinode(m, md, true, # links(m, cache_dirs), cache_dirs[m].nsubdirs, cache_dirs[m].size) = new_parent_inode ∧ mkinode (entries0[str], md1, true, # links(entries0[str], cache_dirs), cache_dirs[entries0[str]].nsubdirs, cache_dirs[entries0[str]].size) = new_child_inode ∧ mkdentry(str0, entries1[str0]) = old_dent ∧ mkdentry(str, entries0[str]) = new_dent ∧ err0 = err ∧ dirs = cache_dirs ∧ afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache ∧ (asynced ↔ asynced2)), ⟨fail#(; ; err); asynced := ?⟩ (err0 = err ∧ (asynced ↔ asynced2)), entries0[str] = ROOT_INO, m3 = m ∧ mkdentry(str, entries0[str]) = mkdentry(str0, entries1[str0]) |
# links(entries[str0], cache_dirs) = cache_dirs[entries[str0]].nlink, # links(m, cache_dirs) = cache_dirs[m].nlink, # links(entries0[str], cache_dirs) = cache_dirs[entries0[str]].nlink, cache_dirs[entries0[str]].entries = ∅, entries0[str] = cache_dirs[m].entries[str], cache_dirs[entries[str0]] = mkdir(cache_dirs[entries[str0]].size, md3, cache_dirs[entries[str0]].nlink, cache_dirs[entries[str0]].nsubdirs, entries2), cache_dirs[entries0[str]] = mkdir(cache_dirs[entries0[str]].size, md4, cache_dirs[entries0[str]].nlink, cache_dirs[entries0[str]].nsubdirs, ∅), cache_dirs[m] = mkdir(cache_dirs[m].size, md5, cache_dirs[m].nlink, cache_dirs[m].nsubdirs, entries0), cache_dirs[m3] = mkdir(m0 + 1, md2, # links(m3, cache_dirs), m1 + 1, entries), afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache, dirs = cache_dirs[m3, mkdir(m0, md2, # links(m3, cache_dirs), m1, entries -- str0)] [m, (m = m3 ⊃ mkdir(m0, md2, # links(m3, cache_dirs), m1, entries -- str0);cache_dirs[m]) .entries:= (m = m3 ⊃ mkdir(m0, md2, # links(m3, cache_dirs), m1, entries -- str0);cache_dirs[m]).entries[str, entries[str0]] ], entries0[str] ≠ ROOT_INO, afs-cons(cache_dirs, cache_files), afs-cons(cache_dirs, (cache_files ⊕ cache_pcache) ⊕ cache_icache), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache), str ∈ entries0, str ∈ cache_dirs[m].entries, entries0[str] ∈ cache_dirs, m ∈ cache_dirs, m3 ∈ cache_dirs, str0 ∈ entries, entries[str0] ∈ cache_dirs, ⌊err0⌋ , cache_sync → synced(cache_files, cache_icache, cache_pcache), m = m3 → md = md0, links(m, cache_dirs) ≠ ∅ ∨ m = ROOT_INO, links(m3, cache_dirs) ≠ ∅ ∨ m3 = ROOT_INO ⊦ ⟨afs_drop_nlink#(mkdentry(str, entries0[str]).ino; dirs, afs_files); old_dent := mkdentry(str0, entries[str0]); asynced1 := true; if ¬ asynced1 then {dirs[m].size := dirs[m].size + 1; if old_dent.ino ∈ dirs then dirs[m].nsubdirs := dirs[m].nsubdirs + 1}; new_dent := mkdentry(mkdentry(str, entries0[str]).name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m3, md0, true, # links(m3, cache_dirs), m1 + 1, m0 + 1); dirs, afs_files); afs_inode_sync#(mkinode(m, md, true, # links(m, cache_dirs), cache_dirs[m].nsubdirs, cache_dirs[m].size); dirs, afs_files); new_child_inode := mkinode(entries0[str], md1, true, # links(entries0[str], cache_dirs), cache_dirs[entries0[str]].nsubdirs, cache_dirs[entries0[str]].size); if asynced1 then {afs_inode_sync#(new_child_inode; dirs, afs_files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, afs_files[new_child_inode.ino].meta, false, afs_files[new_child_inode.ino].nlink, 0, afs_files[new_child_inode.ino].size) )}; old_parent_inode := (m3 ∈ dirs ⊃ mkinode(m3, dirs[m3].meta, true, dirs[m3].nlink, dirs[m3].nsubdirs, dirs[m3].size) ;mkinode(m3, afs_files[m3].meta, false, afs_files[m3].nlink, 0, afs_files[m3].size) ); new_parent_inode := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode(m, afs_files[m].meta, false, afs_files[m].nlink, 0, afs_files[m].size) ); err := ESUCCESS; asynced := ?⟩ ( mkinode(m3, md0, true, # links(m3, cache_dirs), m1 + 1, m0 + 1) = old_parent_inode ∧ mkinode(m, md, true, # links(m, cache_dirs), cache_dirs[m].nsubdirs, cache_dirs[m].size) = new_parent_inode ∧ mkinode (entries0[str], md1, true, # links(entries0[str], cache_dirs), cache_dirs[entries0[str]].nsubdirs, cache_dirs[entries0[str]].size) = new_child_inode ∧ mkdentry(str0, entries[str0]) = old_dent ∧ mkdentry(str, entries0[str]) = new_dent ∧ err0 = err ∧ dirs = cache_dirs ∧ afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache ∧ (asynced ↔ asynced2)), ⟨fail#(; ; err); asynced := ?⟩ (err0 = err ∧ (asynced ↔ asynced2)), m3 = m ∧ mkdentry(str, entries0[str]) = mkdentry(str0, entries[str0])
Used simplifier rules: ⊦ mkdir(m, md, m0, m1, entries).nsubdirs:= m4 = mkdir(m, md, m0, m4, entries); (s)%⊦ mkdir(m, md, m0, m1, entries).size:= m2 = mkdir(m2, md, m0, m1, entries); (s)%⊦ mkdir(m, md, m0, m1, entries).entries:= entries0 = mkdir(m, md, m0, m1, entries0); (s)%⊦ mkdir(m, md, m0, m1, entries) = mkdir(m2, md0, m3, m4, entries0) ↔ m = m2 ∧ md = md0 ∧ m0 = m3 ∧ m1 = m4 ∧ entries = entries0; (ws)%afs-cons-dir-nlink: ⊦ afs-cons(dirs, files) ∧ ino ∈ dirs ∧ dirs[ino] = mkdir(n0, md, n, n1, entries) → # links(ino, dirs) = n; (forward) from specification afs-base