[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 59 from proof inv-rmdir (previous step)

1 = fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].nlink, dentrykeys(inodekey(fs0[ri0[dentrykey(m0, str)]].ino), ri0) = ∅, links(fs0[ri0[dentrykey(m0, str)]].ino, fs0, ri0) = ∅ ++ dentrykey(m0, str), key.dentry?, fs0[ri0[dentrykey(m0, str)]].dentry?, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].directory, fs0[ri0[inodekey(m0)]].directory, fs0[ri0[inodekey(m0)]].inode?, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].inode?, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), ri-cons(ri0, fs0), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[key] ∈ fs0, ri0[inodekey(m0)] ∈ fs0, ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)] ∈ fs0, ri0[dentrykey(m0, str)] ∈ fs0, inodekey(m0) ∈ ri0, inodekey(fs0[ri0[dentrykey(m0, str)]].ino) ∈ ri0, dentrykey(m0, str) ∈ ri0, key ∈ ri0, inodekey(key.ino) ∈ ri0, 1 ≤ fs0[ri0[inodekey(m0)]].nsubdirs, 1 ≤ fs0[ri0[inodekey(m0)]].size, key.data? → fs0[ri0[key]].data? ∧ ¬ fs0[ri0[inodekey(key.ino)]].directory ∧ # fs0[ri0[key]].data = VFS_PAGE_SIZE, key.dentry? → fs0[ri0[key]].dentry? ∧ inodekey(fs0[ri0[key]].ino) ∈ ri0 ∧ ¬ inodekey(key.ino) ∈ ro ∧ ¬ inodekey(fs0[ri0[key]].ino) ∈ ro ∧ fs0[ri0[inodekey(key.ino)]].directory, key.inode? → fs0[ri0[key]].inode?, fs0[ri0[inodekey(m0)]].nlink ≠ 0 ∨ m0 = ROOT_INO ⊦ fs0[ri0[dentrykey(m0, str)]].ino = ROOT_INO, fs0[ri0[dentrykey(m0, str)]].ino = 0, key.ino = 0, fs0[ri0[inodekey(m0)]].nsubdirs = 0, fs0[ri0[inodekey(m0)]].size = 0, adr1 = adr2, adr1 = adr3, adr2 = adr3, inodekey(fs0[ri0[dentrykey(m0, str)]].ino) = key, inodekey(m0) = key, key = dentrykey(m0, str), m0 = 0, adr3 ∈ fs0, adr2 ∈ fs0, adr1 ∈ fs0, inodekey(m0) ∈ ro, inodekey(fs0[ri0[dentrykey(m0, str)]].ino) ∈ ro, fs0[ri0[key]].dentry? ∧ inodekey(fs0[ri0[key]].ino) ∈ ri0 ∧ key.ino ≠ fs0[ri0[dentrykey(m0, str)]].ino ∧ ¬ inodekey(key.ino) ∈ ro ∧ fs0[ri0[key]].ino ≠ fs0[ri0[dentrykey(m0, str)]].ino ∧ ¬ inodekey(fs0[ri0[key]].ino) ∈ ro ∧ (adr3 = (m0 = key.ino ⊃ adr1;ri0[inodekey(key.ino)]) ⊃ inodenode (inodekey(fs0[ri0[dentrykey(m0, str)]].ino), md, true, 0, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].nsubdirs, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].size) ;(adr2 = (m0 = key.ino ⊃ adr1;ri0[inodekey(key.ino)]) ⊃ dentrynode(dentrykey(m0, str), 0) ;(adr1 = (m0 = key.ino ⊃ adr1;ri0[inodekey(key.ino)]) ⊃ inodenode(inodekey(m0), md0, true, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs - 1, fs0[ri0[inodekey(m0)]].size - 1) ;fs0[(m0 = key.ino ⊃ adr1;ri0[inodekey(key.ino)])] ) ) ) .directory

Heuristic simplifier applied rule simplifier

And obtained the following new goals

Proof step 60:
1 = fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].nlink, dentrykeys(inodekey(fs0[ri0[dentrykey(m0, str)]].ino), ri0) = ∅, links(fs0[ri0[dentrykey(m0, str)]].ino, fs0, ri0) = ∅ ++ dentrykey(m0, str), fs0[ri0[dentrykey(m0, str)]].dentry?, fs0[ri0[dentrykey(ino, str0)]].dentry?, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].directory, fs0[ri0[inodekey(m0)]].directory, fs0[ri0[inodekey(ino)]].directory, fs0[ri0[inodekey(m0)]].inode?, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].inode?, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), ri-cons(ri0, fs0), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[dentrykey(ino, str0)] ∈ fs0, ri0[inodekey(m0)] ∈ fs0, ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)] ∈ fs0, ri0[dentrykey(m0, str)] ∈ fs0, inodekey(m0) ∈ ri0, inodekey(fs0[ri0[dentrykey(m0, str)]].ino) ∈ ri0, dentrykey(m0, str) ∈ ri0, dentrykey(ino, str0) ∈ ri0, inodekey(fs0[ri0[dentrykey(ino, str0)]].ino) ∈ ri0, inodekey(ino) ∈ ri0, 1 ≤ fs0[ri0[inodekey(m0)]].nsubdirs, 1 ≤ fs0[ri0[inodekey(m0)]].size, fs0[ri0[inodekey(m0)]].nlink ≠ 0 ∨ m0 = ROOT_INO ⊦ fs0[ri0[dentrykey(m0, str)]].ino = ROOT_INO, fs0[ri0[dentrykey(m0, str)]].ino = 0, fs0[ri0[inodekey(m0)]].nsubdirs = 0, fs0[ri0[inodekey(m0)]].size = 0, adr1 = adr2, adr1 = adr3, adr2 = adr3, dentrykey(ino, str0) = dentrykey(m0, str), ino = 0, m0 = 0, adr3 ∈ fs0, adr2 ∈ fs0, adr1 ∈ fs0, inodekey(m0) ∈ ro, inodekey(fs0[ri0[dentrykey(m0, str)]].ino) ∈ ro, inodekey(fs0[ri0[dentrykey(ino, str0)]].ino) ∈ ro, inodekey(ino) ∈ ro, ino ≠ fs0[ri0[dentrykey(m0, str)]].ino ∧ fs0[ri0[dentrykey(ino, str0)]].ino ≠ fs0[ri0[dentrykey(m0, str)]].ino ∧ (adr3 = (m0 = ino ⊃ adr1;ri0[inodekey(ino)]) ⊃ inodenode (inodekey(fs0[ri0[dentrykey(m0, str)]].ino), md, true, 0, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].nsubdirs, fs0[ri0[inodekey(fs0[ri0[dentrykey(m0, str)]].ino)]].size) ;(adr2 = (m0 = ino ⊃ adr1;ri0[inodekey(ino)]) ⊃ dentrynode(dentrykey(m0, str), 0) ;(adr1 = (m0 = ino ⊃ adr1;ri0[inodekey(ino)]) ⊃ inodenode(inodekey(m0), md0, true, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs - 1, fs0[ri0[inodekey(m0)]].size - 1) ;fs0[(m0 = ino ⊃ adr1;ri0[inodekey(ino)])] ) ) ) .directory

Rule argument

Additional information

Used simplifier rules: elim-dentry: ⊦ key.dentry? ↔ (∃ ino, str. key = dentrykey(ino, str));%dentry-ubifs-cons: ⊦ dentrykey(ino, str) ∈ ri ∧ ri[dentrykey(ino, str)] ∈ fs ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → fs[ri[dentrykey(ino, str)]].dentry?;%ubifs-parent-in: ⊦ dentrykey(ino, str) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → inodekey(ino) ∈ ri; (forward) from specification aubifs-inv% ⊦ ¬ dentrykey(m, str).inode?; (s)% ⊦ dentrykey(m, str).dentry?; (s)% ⊦ ¬ dentrykey(m, str).data?; (s)% ⊦ inodekey(m) ≠ dentrykey(m0, str); (s)% ⊦ dentrykey(m, str).ino = m; (s)