| fi = ∅, fo = ∅, fs = ∅, log = [], nd = inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0), ri = ∅, ro = ∅ ⊦ ⟪choose adr1 with new(adr1 ', fs) ∧ ¬ dups(adr1 ') in {adr := adr1; fs[adr] := nd, log := log + adr, err := ESUCCESS} ifnone err := ENOSPC; boolvar := ?; ro := ∅; ri := ∅; fo := ∅; fi := ∅; err0 := err; if err0 = ESUCCESS then aubifs_core_index_store#(inodekey(ROOT_INO), adr, fi, ro, fo, fs, log, boolvar; ri); if err0 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err0)⟫ ( err0 = ESUCCESS → boolvar ∧ ubifs-cons(fs, ri, ro, fi, fo, log) ∧ replay-cons-strong(fs, ri, ro, fi, fo, log) ∧ file-node-cons(fs, ri) ∧ orphans-cons(fs, ri, ro) ∧ ri-inj(fi)) |
fi = ∅, fo = ∅, fs = ∅, log = [], nd = inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0), ri = ∅, ro = ∅, new(adr1 ', fs) ⊦ ⟪adr := adr1; fs[adr] := nd, log := log + adr, err := ESUCCESS; boolvar := ?; ro := ∅; ri := ∅; fo := ∅; fi := ∅; err0 := err; if err0 = ESUCCESS then aubifs_core_index_store#(inodekey(ROOT_INO), adr, fi, ro, fo, fs, log, boolvar; ri); if err0 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err0)⟫ ( err0 = ESUCCESS → boolvar ∧ ubifs-cons(fs, ri, ro, fi, fo, log) ∧ replay-cons-strong(fs, ri, ro, fi, fo, log) ∧ file-node-cons(fs, ri) ∧ orphans-cons(fs, ri, ro) ∧ ri-inj(fi)), dups(adr1 ')
fi = ∅, fo = ∅, fs = ∅, log = [], nd = inodenode(inodekey(ROOT_INO), md, true, 0, 0, 0), ri = ∅, ro = ∅, ∀ adr1. ¬(new(adr1 ', fs) ∧ ¬ dups(adr1 ')) ⊦ ⟪err := ENOSPC; boolvar := ?; ro := ∅; ri := ∅; fo := ∅; fi := ∅; err0 := err; if err0 = ESUCCESS then aubifs_core_index_store#(inodekey(ROOT_INO), adr, fi, ro, fo, fs, log, boolvar; ri); if err0 = ESUCCESS then aubifs_core_journal_sync#(ri, fi, ro, fo, fs, log; ; boolvar, err0)⟫ ( err0 = ESUCCESS → boolvar ∧ ubifs-cons(fs, ri, ro, fi, fo, log) ∧ replay-cons-strong(fs, ri, ro, fi, fo, log) ∧ file-node-cons(fs, ri) ∧ orphans-cons(fs, ri, ro) ∧ ri-inj(fi))