| boolvar0 ↔ true, ax0 = log0, err = ESUCCESS, fi1 = fi0, fi2 = fi0 ⊖ fo0, fi2 = fi2, fo1 = fo0, fs1 = fs0, log1 = log0, ri2 = fi2, ro1 = ∅, fo0.inodes?, orphans(fs0, ri1).inodes?, afs-cons(abs-dirs(fs0, ri1), abs-files(fs0, ri1)), file-node-cons(fs0, ri1), log-cons(log0, fs0), orphans-cons(fs0, ri1, orphans(fs0, ri1)), replay-cons-strong(fs0, ri1, orphans(fs0, ri1), fi0, fo0, log0), replay-safe(log0, fs0, fi0 ⊖ fo0), replay-safe(log0, fs0, fi2), ri-inj(fi0), ri-inj(ri1), ubifs-cons(fs0, ri1, orphans(fs0, ri1), fi0, fo0, log0) ⊦ [aubifs_replaylog#(log0, fi0, ∅, fo0, fs0, log0, true; err, fi2)] ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → fi2 = replay-log(ax0, fs1, ri2)) → [log := log0; fs := fs0; fo := fo0; fi := fi0; boolvar := true; ro0 := ∅; if err = ESUCCESS then aubifs_core_journal_sync#(fi2, fi, ro0, fo, fs, log; ; boolvar, err)] ( ( err = ESUCCESS → boolvar ∧ ubifs-cons(fs, fi2, ro0, fi, fo, log) ∧ replay-cons-strong(fs, fi2, ro0, fi, fo, log) ∧ file-node-cons(fs, fi2) ∧ orphans-cons(fs, fi2, ro0) ∧ ri-inj(fi2) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro0.inodes? ∧ fo.inodes?) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → fi2 = replay-log(log0, fs0, fi0 ⊖ fo0) ∧ fs = fs0 ∧ fi = fi0 ∧ fo = fo0 ∧ log = log0 ∧ boolvar) → ( err = ESUCCESS → ⟨dirs := abs-dirs(fs0, ri1) \ abs-keys(orphans(fs0, ri1)), files := abs-files(fs0, ri1) \ abs-keys(orphans(fs0, ri1)); afs_recovery#(boolvar2; dirs, files; asynced, err1)⟩ ( dirs = abs-dirs(fs, fi2) ∧ files = abs-files(fs, fi2) ∧ orphans(abs-dirs(fs, fi2), abs-files(fs, fi2)) = abs-keys(ro0) ∧ (asynced → boolvar) ∧ ESUCCESS = err1)) ∧ ( err ≠ ESUCCESS → (∀ dirs, files, boolvar. ⟨afs_recovery#(boolvar2; dirs1, files1; asynced0, err1)⟩ (dirs = dirs1 ∧ files = files1 ∧ (boolvar ↔ asynced0) ∧ err = err1))))) |
err = ESUCCESS, fi2 = fi0 ⊖ fo0, fo0.inodes?, orphans(fs0, ri1).inodes?, afs-cons(abs-dirs(fs0, ri1), abs-files(fs0, ri1)), file-node-cons(fs0, ri1), log-cons(log0, fs0), orphans-cons(fs0, ri1, orphans(fs0, ri1)), replay-cons-strong(fs0, ri1, orphans(fs0, ri1), fi0, fo0, log0), replay-safe(log0, fs0, fi0 ⊖ fo0), ri-inj(fi0), ri-inj(ri1), ubifs-cons(fs0, ri1, orphans(fs0, ri1), fi0, fo0, log0) ⊦ [aubifs_replaylog#(log0, fi0, ∅, fo0, fs0, log0, true; err, fi2)] ( (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → fi2 = replay-log(log0, fs0, fi0 ⊖ fo0)) → [log := log0; fs := fs0; fo := fo0; fi := fi0; boolvar := true; ro0 := ∅; if err = ESUCCESS then aubifs_core_journal_sync#(fi2, fi, ro0, fo, fs, log; ; boolvar, err)] ( ( err = ESUCCESS → boolvar ∧ ubifs-cons(fs, fi2, ro0, fi, fo, log) ∧ replay-cons-strong(fs, fi2, ro0, fi, fo, log) ∧ file-node-cons(fs, fi2) ∧ orphans-cons(fs, fi2, ro0) ∧ ri-inj(fi2) ∧ ri-inj(fi) ∧ log-cons(log, fs) ∧ ro0.inodes? ∧ fo.inodes?) → (err = ESUCCESS ∨ ⌊err⌋ ) ∧ (err = ESUCCESS → fi2 = replay-log(log0, fs0, fi0 ⊖ fo0) ∧ fs = fs0 ∧ fi = fi0 ∧ fo = fo0 ∧ log = log0 ∧ boolvar) → ( err = ESUCCESS → ⟨dirs := abs-dirs(fs0, ri1) \ abs-keys(orphans(fs0, ri1)), files := abs-files(fs0, ri1) \ abs-keys(orphans(fs0, ri1)); afs_recovery#(boolvar2; dirs, files; asynced, err1)⟩ ( dirs = abs-dirs(fs, fi2) ∧ files = abs-files(fs, fi2) ∧ orphans(abs-dirs(fs, fi2), abs-files(fs, fi2)) = abs-keys(ro0) ∧ (asynced → boolvar) ∧ ESUCCESS = err1)) ∧ ( err ≠ ESUCCESS → (∀ dirs, files, boolvar. ⟨afs_recovery#(boolvar2; dirs1, files1; asynced0, err1)⟩ (dirs = dirs1 ∧ files = files1 ∧ (boolvar ↔ asynced0) ∧ err = err1)))))