| asynced1 ↔ cache_asynced, asynced2 ↔ cache_sync, asynced0 ↔ true, asynced ↔ false, afs_dirs = cache_dirs, afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache, ¬ asynced2, dirs = cache_dirs, err = ESUCCESS, err1 = err0, files = cache_files, icache = cache_icache, inode0 = mkinode(m, md, boolvar, m0, m1, m2), afs-cons(cache_dirs, (cache_files ⊕ cache_pcache) ⊕ cache_icache), afs-cons(cache_dirs, cache_files), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache, cache_dirs, cache_files), pre-write-inode(inode0, dirs, files), synced(cache_dirs, cache_icache, cache_pcache), cache_sync → synced(cache_files, cache_icache, cache_pcache), m ∈ cache_dirs ∧ m0 = cache_dirs[m].nlink ∧ m2 = cache_dirs[m].size ∧ m1 = cache_dirs[m].nsubdirs ∧ boolvar ∨ m ∈ cache_files ∧ m0 = ((cache_files ⊕ cache_pcache) ⊕ cache_icache)[m].nlink ∧ m1 = 0 ∧ ¬ boolvar ⊦ ⟪icache_get#(inode0.ino, icache; asynced, inode, err); if err = ESUCCESS ∧ asynced then {inode.meta := inode0.meta; if ¬ inode0.directory then inode.size := inode0.size; icache_set#(inode, asynced0; err, icache)} else if asynced0 then err := EFAIL⟫ ⟨afs_write_inode#(mkinode(m, md, boolvar, m0, m1, m2); err0, afs_dirs, afs_files; afs_asynced)⟩ (afs_dirs = dirs ∧ afs_files = (files ⊕ cache_pcache) ⊕ icache ∧ (afs_asynced ↔ asynced1) ∧ err = err0), inode0.directory |
cache_files[m].nlink = ((cache_files ⊕ cache_pcache) ⊕ cache_icache)[m].nlink, ¬ cache_sync, err = ESUCCESS, afs-cons(cache_dirs, (cache_files ⊕ cache_pcache) ⊕ cache_icache), afs-cons(cache_dirs, cache_files), dcache-cons(cache_dcache, cache_dirs, cache_files), icache-cons(cache_icache, cache_dirs, cache_files), pcache-cons(cache_pcache, cache_dirs, cache_files), synced(cache_dirs, cache_icache, cache_pcache), m ∈ cache_files ⊦ ⟪icache_get#(m, cache_icache; cache_sync, inode, err); afs_files := (cache_files ⊕ cache_pcache) ⊕ cache_icache; boolvar := false; if err = ESUCCESS ∧ cache_sync then {inode.meta := md; if ¬ boolvar then inode.size := m2; icache_set#(inode, true; err, cache_icache)} else if true then err := EFAIL⟫ ⟨cache_dirs0 := cache_dirs; afs_write_inode#(mkinode(m, md, boolvar, cache_files[m].nlink, 0, m2); err0, cache_dirs, afs_files; afs_asynced)⟩ (cache_dirs = cache_dirs0 ∧ afs_files = (cache_files ⊕ cache_pcache) ⊕ cache_icache ∧ (afs_asynced ↔ asynced1) ∧ err = err0)
Used simplifier rules: ⊦ mkinode(m, md, boolvar, m0, m1, m2).size = m2; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).meta = md; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nsubdirs = m1; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nlink = m0; (s)% ⊦ valid-file-ino(ino, dirs, files) ↔ ino ∈ files; (s)%⊦ valid-file-inode(inode, dirs, files) ↔ valid-file-ino(inode.ino, dirs, files) ∧ inode.nlink = files[inode.ino].nlink ∧ inode.nsubdirs = 0 ∧ ¬ inode.directory; (s)% ⊦ valid-dir-ino(ino, dirs, files) ↔ ino ∈ dirs; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).ino = m; (s)%⊦ valid-dir-inode(inode, dirs, files) ↔ valid-dir-ino(inode.ino, dirs, files) ∧ inode.nlink = dirs[inode.ino].nlink ∧ inode.size = dirs[inode.ino].size ∧ inode.nsubdirs = dirs[inode.ino].nsubdirs ∧ inode.directory; (s)%⊦ valid-wb-inode(inode, dirs, files) ↔ valid-dir-inode(inode, dirs, files) ∨ valid-file-inode(inode, dirs, files); (s)%⊦ pre-write-inode(inode, dirs, files) ↔ valid-wb-inode(inode, dirs, files); (s)