| ⟨if pre-evict(inode, dirs, files) then {err := ESUCCESS; let ino = inode.ino in if ino ∈ dirs then if dirs[ino].nlink = 0 then dirs := dirs -- ino else if files[ino].nlink = 0 then files := files -- ino} else abort⟩ (err = err0 ∧ dirs = dirs0 ∧ files = files0), asynced ↔ asynced0, dirs1[m] = mkdir(m5, md1, m6, m7, entries), files1[m] = mkfile(m3, md0, m4, content), dirs = dirs1, files = files1, inode = mkinode(m, md, boolvar, m0, m1, m2) ⊦ (m ∈ dirs1 ∧ m0 = m6 ∧ m2 = m5 ∧ m1 = m7 ∧ boolvar ∨ m ∈ files1 ∧ m0 = m4 ∧ m1 = 0 ∧ ¬ boolvar) ∧ m ≠ ROOT_INO |
⟨err := ESUCCESS; let ino = inode.ino in if ino ∈ dirs then if dirs[ino].nlink = 0 then dirs := dirs -- ino else if files[ino].nlink = 0 then files := files -- ino⟩ (err = err0 ∧ dirs = dirs0 ∧ files = files0), asynced ↔ asynced0, files1[m] = mkfile(m3, md0, m4, content), dirs1[m] = mkdir(m5, md1, m6, m7, entries), dirs = dirs1, files = files1, inode = mkinode(m, md, boolvar, m0, m1, m2), pre-evict(inode, dirs, files) ⊦ (m ∈ dirs1 ∧ m0 = m6 ∧ m2 = m5 ∧ m1 = m7 ∧ boolvar ∨ m ∈ files1 ∧ m0 = m4 ∧ m1 = 0 ∧ ¬ boolvar) ∧ m ≠ ROOT_INO
⟨abort⟩ (err = err0 ∧ dirs = dirs0 ∧ files = files0), asynced ↔ asynced0, files1[m] = mkfile(m3, md0, m4, content), dirs1[m] = mkdir(m5, md1, m6, m7, entries), dirs = dirs1, files = files1, inode = mkinode(m, md, boolvar, m0, m1, m2) ⊦ pre-evict(inode, dirs, files), (m ∈ dirs1 ∧ m0 = m6 ∧ m2 = m5 ∧ m1 = m7 ∧ boolvar ∨ m ∈ files1 ∧ m0 = m4 ∧ m1 = 0 ∧ ¬ boolvar) ∧ m ≠ ROOT_INO