[Imprint][Data Privacy Statement][E-Mail]



View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 85 from proof refine-mkdir (previous step)

fs1[ri1[inodekey(m0)]] = inodenode(key0, md1, true, m1, m2, m6), dirs = abs-dirs(fs1, ri1), files = abs-files(fs1, ri1), old_dent = negdentry(str), p_inode0 = mkinode(m0, md2, true, m1, m2, m6), adr1 ≠ adr3, adr1 ≠ adr2, adr2 ≠ adr3, m0 ≠ 0, n ≠ 0, fo.inodes?, orphans(fs1, ri1).inodes?, afs-cons(abs-dirs(fs1, ri1), abs-files(fs1, ri1)), file-node-cons(fs1, ri1), file-node-cons (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3]), log-cons(log0, fs1), log-cons (log0, fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ]), orphans-cons(fs1, ri1, orphans(fs1, ri1)), orphans-cons (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3], orphans(fs1, ri1)), replay-cons-strong(fs1, ri1, orphans(fs1, ri1), fi, fo, log0), replay-cons-strong (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3], orphans(fs1, ri1), fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 '), ri-inj(fi), ri-inj(ri1), ri-inj(ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3]), ubifs-cons(fs1, ri1, orphans(fs1, ri1), fi, fo, log0), ubifs-cons (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3], orphans(fs1, ri1), fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 '), ri1[inodekey(m0)] ∈ fs1, inodekey(m0) ∈ ri1, ¬ dentrykey(m0, str) ∈ ri1, ¬ inodekey(n) ∈ fo, ¬ inodekey(n) ∈ ri1, ¬ adr1 ∈ fs1, ¬ adr2 ∈ fs1, ¬ adr3 ∈ fs1, asynced → boolvar0, m1 ≠ 0 ∨ m0 = ROOT_INO, links(m0, abs-dirs(fs1, ri1)) ≠ ∅ ∨ m0 = ROOT_INO ⊦ ⟨afs_mkdir#(md; p_inode0, p_inode1, old_dent, err0, dirs, files; asynced)⟩ ( dirs = abs-dirs (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3]) ∧ files = abs-files (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3]) ∧ orphans (abs-dirs (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3]), abs-files (fs1[adr1, inodenode(inodekey(m0), md2, true, m1, m2 + 1, m6 + 1)][adr2, dentrynode(dentrykey(m0, str), n)] [adr3, inodenode(inodekey(n), md, true, 1, 0, 0) ], ri1[inodekey(m0), adr1][dentrykey(m0, str), adr2][inodekey(n), adr3])) = abs-keys(orphans(fs1, ri1)) ∧ (asynced → boolvar) ∧ mkinode(m0, md2, true, m1, m2 + 1, m6 + 1) = p_inode0 ∧ mkinode(n, md, true, 1, 0, 0) = p_inode1 ∧ mkdentry(str, n) = old_dent ∧ ESUCCESS = err0), m1 = 0 ∧ m0 ≠ ROOT_INO

User applied rule insert program lemma

And obtained the following new goals

Rule argument

spec: afs-asm name: inv-mkdir seq: afs-cons(dirs, files), pre-mkdir(p_inode, dent, md, dirs, files) ⊦ ⟪afs_mkdir# (md; p_inode, c_inode, dent, err, dirs, files; asynced)⟫ afs-cons(dirs, files) subst: [md, files, dirs, err, dent, c_inode, p_inode, asynced] → [md, files, dirs, err0, old_dent, p_inode1, p_inode0, asynced] flags: List([[1,0,0]])

Additional information

Used simplifier rules: ⊦ pre-mkdir(p_inode, dent, md, dirs, files) ↔ valid-negdentry(p_inode.ino, dent, dirs, files) ∧ valid-dir-inode(p_inode, dirs, files); (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).ino = m; (s)%⊦ valid-negdentry(ino, dent, dirs, files) ↔ valid-parent-ino(ino, dirs, files) ∧ ¬ dent.name ∈ dirs[ino].entries ∧ dent.negdentry?; (s)%⊦ valid-parent-ino(ino, dirs, files) ↔ ino ∈ dirs ∧ (links(ino, dirs) ≠ ∅ ∨ ino = ROOT_INO); (s)%⊦ ino ∈ abs-dirs(fs, ri) ↔ inodekey(ino) ∈ ri ∧ fs[ri[inodekey(ino)]].directory; (s)% ⊦ negdentry(str).name = str; (s)%⊦ inodekey(ino) ∈ ri ∧ fs[ri[inodekey(ino)]].directory → abs-dirs(fs, ri)[ino] = abs-dir(ino, fs, ri); (s)%⊦ abs-dir(ino, fs, ri) = mkdir (fs[ri[inodekey(ino)]].size, fs[ri[inodekey(ino)]].meta, fs[ri[inodekey(ino)]].nlink, fs[ri[inodekey(ino)]].nsubdirs, abs-children(ino, fs, ri)); (s)% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)% ⊦ str ∈ abs-children(ino, fs, ri) ↔ dentrykey(ino, str) ∈ ri; (s)% ⊦ negdentry(str).negdentry?; (s)%⊦ valid-dir-inode(inode, dirs, files) ↔ valid-dir-ino(inode.ino, dirs, files) ∧ inode.nlink = dirs[inode.ino].nlink ∧ inode.size = dirs[inode.ino].size ∧ inode.nsubdirs = dirs[inode.ino].nsubdirs ∧ inode.directory; (s)% ⊦ valid-dir-ino(ino, dirs, files) ↔ ino ∈ dirs; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nlink = m0; (s)% ⊦ mkdir(m, md, m0, m1, entries).nlink = m0; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).size = m2; (s)% ⊦ mkdir(m, md, m0, m1, entries).size = m; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nsubdirs = m1; (s)% ⊦ mkdir(m, md, m0, m1, entries).nsubdirs = m1; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).directory ↔ boolvar; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).nlink = m; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).size = m1; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).nsubdirs = m0; (s)