| fs0[ri0[inodekey(m8)]] = inodenode(key1, md0, boolvar0, m0, m9, m10), fs0[ri0[dentrykey(m, str0)]] = dentrynode(key0, m8), fs0[ri0[inodekey(m)]] = inodenode(key2, md2, true, m1, m2, m4), replay-log(log0, fs0, fi ⊖ fo) = ri0 ⊖ ro, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), replay-safe(log0, fs0, fi ⊖ fo), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[inodekey(m)] ∈ fs0, inodekey(m) ∈ ri0, dentrykey(m, str0) ∈ ri0, inodekey(m8) ∈ ri0, ri0[dentrykey(m, str0)] ∈ fs0, ri0[inodekey(m8)] ∈ fs0, key ∈ ri0, 1 ≤ m4, boolvar3 → 1 ≤ m2, m0 = 1 → links(m8, fs0, ri0) = ∅ ++ dentrykey(m, str0), boolvar0 → dentrykeys(inodekey(m8), ri0) = ∅, key = inodekey(m8) ∨ key ∈ ri0 ⊖ ro, m1 ≠ 0 ∨ m = ROOT_INO, ¬ boolvar0 ∧ ¬ boolvar3 ∨ boolvar0 ∧ boolvar3 ∧ m3 = m10, ¬ boolvar0 ∧ ¬ boolvar2 ∨ boolvar0 ∧ boolvar2 ∧ m6 = m10 ⊦ (ri0 ⊖ ro)[key] = (ri0[dentrykey(m, str0), adr2][inodekey(m), adr3][inodekey(m8), adr4] ⊖ ro)[key], adr1 = adr4, adr1 = adr3, adr1 = adr2, adr2 = adr4, adr2 = adr3, adr3 = adr4, inodekey(m8) = key, key = inodekey(m), key = dentrykey(m, str0), m = 0, m0 = 0, m4 = 0, m8 = ROOT_INO, m8 = 0, adr1 ∈ log0, adr2 ∈ log0, adr3 ∈ log0, adr4 ∈ log0, inodekey(m) ∈ ro, adr1 ∈ fs0, adr2 ∈ fs0, adr3 ∈ fs0, adr4 ∈ fs0, adr2 ∈ ri0 -- dentrykey(m, str0), ¬ key ∈ ro ∧ ¬ key.data? |
fs0[ri0[inodekey(m8)]] = inodenode(key1, md0, boolvar0, m0, m9, m10), fs0[ri0[dentrykey(m, str0)]] = dentrynode(key0, m8), fs0[ri0[inodekey(m)]] = inodenode(key2, md2, true, m1, m2, m4), replay-log(log0, fs0, fi ⊖ fo) = ri0 ⊖ ro, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), replay-safe(log0, fs0, fi ⊖ fo), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[inodekey(m)] ∈ fs0, inodekey(m) ∈ ri0, dentrykey(m, str0) ∈ ri0, inodekey(m8) ∈ ri0, ri0[dentrykey(m, str0)] ∈ fs0, ri0[inodekey(m8)] ∈ fs0, datakey(ino, n) ∈ ri0, inodekey(ino) ∈ ri0, 1 ≤ m4, boolvar3 → 1 ≤ m2, m0 = 1 → links(m8, fs0, ri0) = ∅ ++ dentrykey(m, str0), boolvar0 → dentrykeys(inodekey(m8), ri0) = ∅, m1 ≠ 0 ∨ m = ROOT_INO, ¬ boolvar0 ∧ ¬ boolvar3 ∨ boolvar0 ∧ boolvar3 ∧ m3 = m10, ¬ boolvar0 ∧ ¬ boolvar2 ∨ boolvar0 ∧ boolvar2 ∧ m6 = m10 ⊦ (ri0 ⊖ ro)[datakey(ino, n)] = (ri0[dentrykey(m, str0), adr2][inodekey(m), adr3][inodekey(m8), adr4] ⊖ ro)[datakey(ino, n)], adr1 = adr4, adr1 = adr3, adr1 = adr2, adr2 = adr4, adr2 = adr3, adr3 = adr4, m = 0, m0 = 0, m4 = 0, m8 = ROOT_INO, m8 = 0, fs0[ri0[inodekey(ino)]].directory, adr1 ∈ log0, adr2 ∈ log0, adr3 ∈ log0, adr4 ∈ log0, inodekey(m) ∈ ro, adr1 ∈ fs0, adr2 ∈ fs0, adr3 ∈ fs0, adr4 ∈ fs0, adr2 ∈ ri0 -- dentrykey(m, str0), inodekey(ino) ∈ ro
Used simplifier rules: elim-data: ⊦ key.data? ↔ (∃ ino, n. key = datakey(ino, n));%ubifs-file-in: ⊦ datakey(ino, n) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → inodekey(ino) ∈ ri; (forward) from specification aubifs-inv%ubifs-file-notdir: ⊦ datakey(ino, n) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → ¬ fs[ri[inodekey(ino)]].directory; (forward) from specification aubifs-inv% ⊦ datakey(m, m0).ino = m; (s)% ⊦ datakey(m, m0).data?; (s)% ⊦ ks.inodes? → ¬ datakey(ino, n) ∈ ks; (s)% ⊦ datakey(m, m0) ≠ dentrykey(m1, str); (s)% ⊦ inodekey(m) ≠ datakey(m0, m1); (s)%⊦ key ∈ ri ⊖ ks ↔ key ∈ ri ∧ ¬ key ∈ ks ∧ (key.data? → ¬ inodekey(key.ino) ∈ ks); (ws)