[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 83 from proof inv-unlink (previous step)

1 = fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].nlink, links(fs0[ri0[dentrykey(m1, str)]].ino, fs0, ri0) = ∅ ++ dentrykey(m1, str), key.data?, fs0[ri0[dentrykey(m1, str)]].dentry?, fs0[ri0[inodekey(m1)]].directory, fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].inode?, fs0[ri0[inodekey(m1)]].inode?, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), ri-cons(ri0, fs0), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[key] ∈ fs0, dentrykey(m1, str) ∈ ri0, ri0[dentrykey(m1, str)] ∈ fs0, inodekey(fs0[ri0[dentrykey(m1, str)]].ino) ∈ ri0, ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)] ∈ fs0, inodekey(m1) ∈ ri0, ri0[inodekey(m1)] ∈ fs0, key ∈ ri0, inodekey(key.ino) ∈ ri0, 1 ≤ fs0[ri0[inodekey(m1)]].size, key.data? → fs0[ri0[key]].data? ∧ ¬ fs0[ri0[inodekey(key.ino)]].directory ∧ # fs0[ri0[key]].data = VFS_PAGE_SIZE, key.dentry? → fs0[ri0[key]].dentry? ∧ inodekey(fs0[ri0[key]].ino) ∈ ri0 ∧ ¬ inodekey(key.ino) ∈ ro ∧ ¬ inodekey(fs0[ri0[key]].ino) ∈ ro ∧ fs0[ri0[inodekey(key.ino)]].directory, key.inode? → fs0[ri0[key]].inode?, fs0[ri0[inodekey(m1)]].nlink ≠ 0 ∨ m1 = ROOT_INO ⊦ fs0[ri0[dentrykey(m1, str)]].ino = ROOT_INO, fs0[ri0[dentrykey(m1, str)]].ino = 0, key.ino = 0, key.ino = fs0[ri0[dentrykey(m1, str)]].ino, fs0[ri0[inodekey(m1)]].size = 0, adr1 = adr2, adr1 = adr3, adr2 = adr3, inodekey(fs0[ri0[dentrykey(m1, str)]].ino) = key, inodekey(m1) = key, key = dentrykey(m1, str), m1 = 0, fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].directory, adr3 ∈ fs0, adr2 ∈ fs0, adr1 ∈ fs0, inodekey(fs0[ri0[dentrykey(m1, str)]].ino) ∈ ro, inodekey(m1) ∈ ro, fs0[ri0[key]].data? ∧ ¬ (adr3 = (m1 = key.ino ⊃ adr1;ri0[inodekey(key.ino)]) ⊃ inodenode(inodekey(fs0[ri0[dentrykey(m1, str)]].ino), md, false, 0, fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].nsubdirs, m2) ;(adr2 = (m1 = key.ino ⊃ adr1;ri0[inodekey(key.ino)]) ⊃ dentrynode(dentrykey(m1, str), 0) ;(adr1 = (m1 = key.ino ⊃ adr1;ri0[inodekey(key.ino)]) ⊃ inodenode(inodekey(m1), md0, true, fs0[ri0[inodekey(m1)]].nlink, fs0[ri0[inodekey(m1)]].nsubdirs, fs0[ri0[inodekey(m1)]].size - 1) ;fs0[(m1 = key.ino ⊃ adr1;ri0[inodekey(key.ino)])] ) ) ) .directory ∧ # fs0[ri0[key]].data = VFS_PAGE_SIZE

Heuristic simplifier applied rule simplifier

And obtained the following new goals

Proof step 84:
1 = fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].nlink, links(fs0[ri0[dentrykey(m1, str)]].ino, fs0, ri0) = ∅ ++ dentrykey(m1, str), fs0[ri0[datakey(ino, n)]].data?, fs0[ri0[dentrykey(m1, str)]].dentry?, fs0[ri0[inodekey(m1)]].directory, (adr3 = ri0[inodekey(ino)] ⊃ inodenode(inodekey(fs0[ri0[dentrykey(m1, str)]].ino), md, false, 0, fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].nsubdirs, m2) ;(adr2 = ri0[inodekey(ino)] ⊃ dentrynode(dentrykey(m1, str), 0) ;(adr1 = ri0[inodekey(ino)] ⊃ inodenode(inodekey(m1), md0, true, fs0[ri0[inodekey(m1)]].nlink, fs0[ri0[inodekey(m1)]].nsubdirs, fs0[ri0[inodekey(m1)]].size - 1) ;fs0[ri0[inodekey(ino)]] ) ) ) .directory, fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].inode?, fs0[ri0[inodekey(m1)]].inode?, fo.inodes?, ro.inodes?, file-node-cons(fs0, ri0), log-cons(log0, fs0), orphans-cons(fs0, ri0, ro), replay-cons-strong(fs0, ri0, ro, fi, fo, log0), ri-cons(ri0, fs0), ri-inj(fi), ri-inj(ri0), ubifs-cons(fs0, ri0, ro, fi, fo, log0), ri0[datakey(ino, n)] ∈ fs0, dentrykey(m1, str) ∈ ri0, ri0[dentrykey(m1, str)] ∈ fs0, inodekey(fs0[ri0[dentrykey(m1, str)]].ino) ∈ ri0, ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)] ∈ fs0, inodekey(m1) ∈ ri0, ri0[inodekey(m1)] ∈ fs0, datakey(ino, n) ∈ ri0, inodekey(ino) ∈ ri0, 1 ≤ fs0[ri0[inodekey(m1)]].size, fs0[ri0[inodekey(m1)]].nlink ≠ 0 ∨ m1 = ROOT_INO ⊦ fs0[ri0[dentrykey(m1, str)]].ino = ROOT_INO, fs0[ri0[dentrykey(m1, str)]].ino = 0, fs0[ri0[inodekey(m1)]].size = 0, adr1 = adr2, adr1 = adr3, adr2 = adr3, ino = 0, ino = fs0[ri0[dentrykey(m1, str)]].ino, m1 = 0, fs0[ri0[inodekey(fs0[ri0[dentrykey(m1, str)]].ino)]].directory, fs0[ri0[inodekey(ino)]].directory, adr3 ∈ fs0, adr2 ∈ fs0, adr1 ∈ fs0, inodekey(fs0[ri0[dentrykey(m1, str)]].ino) ∈ ro, inodekey(m1) ∈ ro

Rule argument

Additional information

Used simplifier rules: elim-data: ⊦ key.data? ↔ (∃ ino, n. key = datakey(ino, n));%data-ubifs-cons: ⊦ datakey(ino, n) ∈ ri ∧ ri[datakey(ino, n)] ∈ fs ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → fs[ri[datakey(ino, n)]].data?;%ubifs-file-in: ⊦ datakey(ino, n) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → inodekey(ino) ∈ ri; (forward) from specification aubifs-inv%ubifs-file-notdir: ⊦ datakey(ino, n) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → ¬ fs[ri[inodekey(ino)]].directory; (forward) from specification aubifs-inv% ⊦ ¬ datakey(m, m0).inode?; (s)% ⊦ ¬ datakey(m, m0).dentry?; (s)%⊦ datakey(m, n) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → # fs[ri[datakey(m, n)]].data = VFS_PAGE_SIZE; (s)% ⊦ datakey(m, m0).data?; (s)% ⊦ datakey(m, m0) ≠ dentrykey(m1, str); (s)% ⊦ inodekey(m) ≠ datakey(m0, m1); (s)% ⊦ datakey(m, m0).ino = m; (s)