| ⟨afs_evict#(p_inode, asynced0; err, dirs1, files1)⟩ (err = err0 ∧ dirs1 = dirs0 ∧ files1 = files0), asynced ↔ boolvar0, dirs = dirs1, files = files1, inode = p_inode ⊦ pre-evict(inode, dirs, files) |
⟨afs_evict#(p_inode, asynced0; err, dirs1, files1)⟩ (err = err0 ∧ dirs1 = dirs0 ∧ files1 = files0) ⊦ ( p_inode.ino ∈ dirs1 ∧ p_inode.nlink = dirs1[p_inode.ino].nlink ∧ p_inode.size = dirs1[p_inode.ino].size ∧ p_inode.nsubdirs = dirs1[p_inode.ino].nsubdirs ∧ p_inode.directory ∨ p_inode.ino ∈ files1 ∧ p_inode.nlink = files1[p_inode.ino].nlink ∧ p_inode.nsubdirs = 0 ∧ ¬ p_inode.directory) ∧ p_inode.ino ≠ ROOT_INO
Used simplifier rules: ⊦ valid-file-ino(ino, dirs, files) ↔ ino ∈ files; (s)%⊦ valid-file-inode(inode, dirs, files) ↔ valid-file-ino(inode.ino, dirs, files) ∧ inode.nlink = files[inode.ino].nlink ∧ inode.nsubdirs = 0 ∧ ¬ inode.directory; (s)% ⊦ valid-dir-ino(ino, dirs, files) ↔ ino ∈ dirs; (s)%⊦ valid-dir-inode(inode, dirs, files) ↔ valid-dir-ino(inode.ino, dirs, files) ∧ inode.nlink = dirs[inode.ino].nlink ∧ inode.size = dirs[inode.ino].size ∧ inode.nsubdirs = dirs[inode.ino].nsubdirs ∧ inode.directory; (s)%⊦ valid-wb-inode(inode, dirs, files) ↔ valid-dir-inode(inode, dirs, files) ∨ valid-file-inode(inode, dirs, files); (s)%⊦ pre-evict(inode, dirs, files) ↔ valid-wb-inode(inode, dirs, files) ∧ inode.ino ≠ ROOT_INO; (s)