[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 304 from proof inv-truncate (previous step)

fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) = datanode(datakey(m0, m4 / VFS_PAGE_SIZE), buf), fs0[ri0[inodekey(m0)]].nlink = 0 ∧ m0 ≠ ROOT_INO ↔ inodekey(m0) ∈ ro, VFS_PAGE_SIZE = n0 + m4 % VFS_PAGE_SIZE, ri = ri0[datakey(m0, m4 / VFS_PAGE_SIZE), adr3][inodekey(m0), adr2], m4 % VFS_PAGE_SIZE ≠ 0, adr1 ≠ adr2, adr1 ≠ adr3, adr2 ≠ adr3, m0 ≠ 0, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data?, fs0[ri0[inodekey(m0)]].inode?, ro.inodes?, fo.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), ri-cons(ri0, fs0), ri-inj(ri0), ri-inj(fi), ubifs-cons(fs0, ri0, ro, fi, fo, log0), inodekey(m0) ∈ ri0, ri0[inodekey(m0)] ∈ fs0, datakey(m0, m4 / VFS_PAGE_SIZE) ∈ ri0, ri0[datakey(m0, m4 / VFS_PAGE_SIZE)] ∈ fs0, m4 ≤ n, ¬ fs0[ri0[inodekey(m0)]].directory, ¬ buf-opt.some?, ¬ adr3 ∈ ri0, ¬ adr3 ∈ fs0, ¬ adr2 ∈ fs0, ¬ adr1 ∈ fs0 ⊦ ⟪aubifs_core_index_truncate# (inodekey(m0), m4, fi, ro, fo, fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ((log0 + adr1 ') + adr2 ') + adr3 ', boolvar0 ; ri); boolvar1 := true; inode := mkinode (m0, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n).meta, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n).directory, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n).nlink, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n).nsubdirs, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n).size); if boolvar1 then buf-opt := some(buf)⟫ ( ubifs-cons (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri, ro, fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 ') ∧ replay-cons-strong (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri, ro, fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 ') ∧ file-node-cons (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri) ∧ orphans-cons (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri, ro))

Heuristic unfold applied rule call right

And obtained the following new goals

Proof step 305:
fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) = datanode(datakey(m0, m4 / VFS_PAGE_SIZE), buf), boolvar ↔ boolvar0, fs0[ri0[inodekey(m0)]].nlink = 0 ∧ m0 ≠ ROOT_INO ↔ inodekey(m0) ∈ ro, VFS_PAGE_SIZE = n0 + m4 % VFS_PAGE_SIZE, fs = fs0[adr1, truncnode(inodekey(m0), m4)][adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1)] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], key = inodekey(m0), log = ((log0 + adr1 ') + adr2 ') + adr3 ', n = m4, ri = ri0[datakey(m0, m4 / VFS_PAGE_SIZE), adr3][inodekey(m0), adr2], fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data?, fs0[ri0[inodekey(m0)]].inode?, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), ri-cons(ri0, fs0), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[datakey(m0, m4 / VFS_PAGE_SIZE)] ∈ fs0, datakey(m0, m4 / VFS_PAGE_SIZE) ∈ ri0, ri0[inodekey(m0)] ∈ fs0, inodekey(m0) ∈ ri0, m4 % VFS_PAGE_SIZE + n0 ≤ # fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, m4 ≤ n1 ⊦ ⟪let ks = datakeys(key, n, ri) in ri := ri \ ks; boolvar1 := true; inode := mkinode (m0, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1).meta, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1).directory, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1).nlink, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1).nsubdirs, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1).size); if boolvar1 then buf-opt := some(buf)⟫ ( ubifs-cons (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri, ro, fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 ') ∧ replay-cons-strong (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri, ro, fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 ') ∧ file-node-cons (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri) ∧ orphans-cons (fs0[adr1, truncnode(inodekey(m0), m4)] [adr2, inodenode(inodekey(m0), md0, false, fs0[ri0[inodekey(m0)]].nlink, fs0[ri0[inodekey(m0)]].nsubdirs, n1) ] [adr3, fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data:= fill(fs0[ri0[datakey(m0, m4 / VFS_PAGE_SIZE)]].data, zero, m4 % VFS_PAGE_SIZE, n0) ], ri, ro)), m4 % VFS_PAGE_SIZE = 0, VFS_PAGE_SIZE = 0, adr1 = adr2, adr1 = adr3, adr2 = adr3, m0 = 0, fs0[ri0[inodekey(m0)]].directory, buf-opt.some?, adr3 ∈ ri0, adr3 ∈ fs0, adr2 ∈ fs0, adr1 ∈ fs0

Rule argument

pos: right 1

Additional information

Used simplifier rules: inode-ubifs-cons: ⊦ inodekey(ino) ∈ ri ∧ ri[inodekey(ino)] ∈ fs ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → fs[ri[inodekey(ino)]].inode?;%data-ubifs-cons: ⊦ datakey(ino, n) ∈ ri ∧ ri[datakey(ino, n)] ∈ fs ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → fs[ri[datakey(ino, n)]].data?;%aubifs_core_index_truncate#(KEY, N, FI, RO, FO, FS, LOG, CSYNCED; RI) {let KS = datakeys(KEY, N, RI) in RI := RI \ KS};% ⊦ key ∈ ri ∧ ri-cons(ri, fs) → ri[key] ∈ fs; (ss)%⊦ datakey(m, n) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → # fs[ri[datakey(m, n)]].data = VFS_PAGE_SIZE; (s)% ⊦ VFS_PAGE_SIZE ≠ 0; (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)%c: ⊦ m + n = n + m; from specification nat-basic%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%lf-02: ⊦ m < n ∧ m = n0 → n0 < n; (forward) from specification nat-basic%lf-01: ⊦ m < n ∧ n = n0 → m < n0; (forward) from specification nat-basic% ⊦ m < n → ¬ n < m; (s)