[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 77 from proof refine-truncate-buff-none-uncached (previous step)

asynced0 ↔ false, asynced1 ↔ true, VFS_PAGE_SIZE = n0 + m2 % VFS_PAGE_SIZE, ((cache_files ⊕ cache_pcache) ⊕ cache_icache)[m] = mkfile(m0, md0, # links(m, cache_dirs), content0), cache_files[m] = mkfile(m3, md1, # links(m, cache_dirs), content), afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache, buf-opt = some(fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)), dirs = cache_dirs, err = ESUCCESS, files = files0, files0 = cache_files [m, mkfile(m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ], ino = inode.ino, inode = mkinode(m, md, false, # links(m, cache_dirs), 0, n), inode1 = (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][m].meta, false, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][m].nlink, 0, files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta][m].size) ), afs-cons(cache_dirs, (cache_files ⊕ cache_pcache) ⊕ cache_icache), afs-cons(cache_dirs, cache_files), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache), m2 / VFS_PAGE_SIZE ∈ content, ino ∈ files, m ∈ cache_files, m2 % VFS_PAGE_SIZE + n0 ≤ # content[m2 / VFS_PAGE_SIZE], m2 ≤ n, cache_sync → synced(cache_files, cache_icache, cache_pcache) ⊦ ⟪icache_set#(inode1, asynced0; err, cache_icache); pcache_truncate#(inode1.ino, m2, n; err, cache_pcache); if asynced1 then pcache_set#(inode1.ino, m2 / VFS_PAGE_SIZE, buf-opt.buf, asynced0; err, cache_pcache); if ¬ asynced1 ∨ err ≠ ESUCCESS then buf-opt := none⟫ ⟨buf-opt0 := none; inode0 := mkinode(m, md, false, # links(m, cache_dirs), 0, m2); afs_truncate#(n, m2 / VFS_PAGE_SIZE; buf-opt0, inode0, asynced5, err0, cache_dirs, afs_files, cache_asynced)⟩ ( cache_dirs = dirs ∧ afs_files = (files[ino, files[ino].size:= inode.size][ino, files[ino, files[ino].size:= inode.size][ino].meta:= inode.meta] ⊕ cache_pcache) ⊕ cache_icache ∧ (cache_asynced ↔ asynced) ∧ buf-opt = buf-opt0 ∧ inode1 = inode0 ∧ (asynced1 ↔ asynced5) ∧ err = err0), m2 % VFS_PAGE_SIZE = 0, VFS_PAGE_SIZE = 0, datakey(m, m2 / VFS_PAGE_SIZE) ∈ cache_pcache

Heuristic simplifier applied rule simplifier

And obtained the following new goals

Proof step 78:
VFS_PAGE_SIZE = n0 + m2 % VFS_PAGE_SIZE, ((cache_files ⊕ cache_pcache) ⊕ cache_icache)[m] = mkfile(m0, md0, # links(m, cache_dirs), content0), cache_files[m] = mkfile(m3, md1, # links(m, cache_dirs), content), afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache, err = ESUCCESS, m2 % VFS_PAGE_SIZE ≠ 0, afs-cons(cache_dirs, (cache_files ⊕ cache_pcache) ⊕ cache_icache), afs-cons(cache_dirs, cache_files), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache), m ∈ cache_files, m2 / VFS_PAGE_SIZE ∈ content, m2 ≤ n, ¬ datakey(m, m2 / VFS_PAGE_SIZE) ∈ cache_pcache, cache_sync → synced(cache_files, cache_icache, cache_pcache) ⊦ ⟪icache_set# (mkinode (m, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size), false ; err, cache_icache); pcache_truncate# ((m ∈ cache_dirs ⊃ mkinode(m, cache_dirs[m].meta, true, cache_dirs[m].nlink, cache_dirs[m].nsubdirs, cache_dirs[m].size) ;mkinode (m, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size) ) .ino, m2, n ; err, cache_pcache); inode1 := (m ∈ cache_dirs ⊃ mkinode(m, cache_dirs[m].meta, true, cache_dirs[m].nlink, cache_dirs[m].nsubdirs, cache_dirs[m].size) ;mkinode (m, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .meta, false, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .nlink, 0, cache_files [m, cache_files [m, cache_files [m, mkfile (m3, md1, # links(m, cache_dirs), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] [m ] .size:= n ] [m ] .meta:= md ] [m ] .size) ); buf-opt := some(fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)); asynced1 := true; if asynced1 then pcache_set#(inode1.ino, m2 / VFS_PAGE_SIZE, buf-opt.buf, false; err, cache_pcache); if ¬ asynced1 ∨ err ≠ ESUCCESS then buf-opt := none⟫ ⟨buf-opt0 := none; inode0 := mkinode(m, md, false, # links(m, cache_dirs), 0, m2); cache_dirs0 := cache_dirs; cache_dirs1 := cache_dirs; cache_dirs2 := cache_dirs; cache_dirs3 := cache_dirs; afs_truncate#(n, m2 / VFS_PAGE_SIZE; buf-opt0, inode0, asynced5, err0, cache_dirs, afs_files, cache_asynced)⟩ ( cache_dirs = cache_dirs3 ∧ afs_files = ( cache_files [m, mkfile (n, md, # links(m, cache_dirs2), content[m2 / VFS_PAGE_SIZE, fill(content[m2 / VFS_PAGE_SIZE], zero, m2 % VFS_PAGE_SIZE, n0)] upto m2) ] ⊕ cache_pcache) ⊕ cache_icache ∧ (cache_asynced ↔ asynced) ∧ buf-opt = buf-opt0 ∧ inode1 = inode0 ∧ (asynced1 ↔ asynced5) ∧ err = err0)

Rule argument

Additional information

Used simplifier rules: ⊦ afs-cons(dirs, files) ∧ ino ∈ dirs → ¬ ino ∈ files; (s)% ⊦ m ≤ m; (s)%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ mkfile(m, md, m0, content).meta:= md0 = mkfile(m, md0, m0, content); (s)% ⊦ mkfile(m, md, m0, content).size:= m1 = mkfile(m1, md, m0, content); (s)% ⊦ files[ino, af][ino0] = (ino0 = ino ∧ ino ∈ files ⊃ af;files[ino0]); (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).meta = md; (s)% ⊦ files[ino, af][ino, af0] = files[ino, af0]; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).size = m2; (s)% ⊦ ino ∈ files[ino0, af] ↔ ino ∈ files; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).ino = m; (s)%⊦ afs-cons(dirs, files) ∧ ino ∈ files ∧ files[ino] = mkfile(m, md, n0, content) ∧ n ∈ content → # content[n] = VFS_PAGE_SIZE; (s)% ⊦ VFS_PAGE_SIZE ≠ 0; (s)