[Imprint][Data Privacy Statement][E-Mail]



View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 250 from proof refine-rename-new-keep-parent (previous step)

boolvar0 ↔ false, boolvar ↔ false, fs0[ri0[dentrykey(m3, str)]] = dentrynode(key1, m), fs0[ri0[inodekey(m3)]] = inodenode(key0, md1, true, m4, m5, m6), dirs = dirs3[new_ino, dirs3[new_ino].nsubdirs:= (dirs3[new_ino].nsubdirs + 1)], dirs0 = abs-dirs(fs0, ri0)[old_ino, abs-dirs(fs0, ri0)[old_ino].entries:= (abs-dirs(fs0, ri0)[old_ino].entries -- str)], dirs1 = dirs0[old_ino, dirs0[old_ino].size:= (dirs0[old_ino].size - 1)], dirs2 = dirs1[new_ino, dirs1[new_ino].entries:= dirs1[new_ino].entries[str0, old_dent.ino]], dirs3 = dirs2[new_ino, dirs2[new_ino].size:= (dirs2[new_ino].size + 1)], files = abs-files(fs0, ri0), new_dent = negdentry(str0), new_ino = m3, old_dent = mkdentry(str, m), old_ino = m3, old_dent.dentry?, orphans(fs0, ri0).inodes?, fo.inodes?, afs-cons(abs-dirs(fs0, ri0), abs-files(fs0, ri0)), file-node-cons (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)][adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6)], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3]), file-node-cons(fs0, ri0), log-cons (log0, fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)][adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6)]), log-cons(log0, fs0), orphans-cons (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)][adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6)], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3], orphans(fs0, ri0)), orphans-cons(fs0, ri0, orphans(fs0, ri0)), replay-cons-strong (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)][adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6)], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3], orphans(fs0, ri0), fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 '), replay-cons-strong(fs0, ri0, orphans(fs0, ri0), fi, fo, log0), ri-inj((ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3]), ri-inj(ri0), ri-inj(fi), ubifs-cons (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)][adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6)], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3], orphans(fs0, ri0), fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 '), ubifs-cons(fs0, ri0, orphans(fs0, ri0), fi, fo, log0), inodekey(m) ∈ ri0, dentrykey(m3, str) ∈ ri0, inodekey(m3) ∈ ri0, ri0[inodekey(m3)] ∈ fs0, ri0[dentrykey(m3, str)] ∈ fs0, old_dent.ino ∈ dirs3, 1 ≤ m6, dirs0[old_ino].size ≥ 1, boolvar1 → 1 ≤ m5, boolvar3 → boolvar4, m4 ≠ 0 ∨ m3 = ROOT_INO, links(m3, abs-dirs(fs0, ri0)) ≠ ∅ ∨ m3 = ROOT_INO, ¬ fs0[ri0[inodekey(m)]].directory ∧ ¬ boolvar1 ∧ m0 = fs0[ri0[inodekey(m)]].nlink ∧ m1 = fs0[ri0[inodekey(m)]].nsubdirs ∨ fs0[ri0[inodekey(m)]].directory ∧ boolvar1 ∧ m0 = fs0[ri0[inodekey(m)]].nlink ∧ m1 = fs0[ri0[inodekey(m)]].nsubdirs ∧ m2 = fs0[ri0[inodekey(m)]].size, fs0[ri0[inodekey(m)]].directory ∧ m0 = fs0[ri0[inodekey(m)]].nlink ∧ m2 = fs0[ri0[inodekey(m)]].size ∧ m1 = fs0[ri0[inodekey(m)]].nsubdirs ∧ boolvar1 ∨ ¬ fs0[ri0[inodekey(m)]].directory ∧ m0 = fs0[ri0[inodekey(m)]].nlink ∧ m1 = 0 ∧ ¬ boolvar1 ⊦ ⟨new_dent := mkdentry(new_dent.name, old_dent.ino); old_dent := negdentry(old_dent.name); afs_inode_sync#(mkinode(m3, md0, true, m4, m5, m6); dirs, files); afs_inode_sync#(mkinode(m3, md0, true, m4, m5, m6); dirs, files); new_child_inode := new_dent_inode; if boolvar0 then {afs_inode_sync#(new_child_inode; dirs, files); new_child_inode := (new_child_inode.ino ∈ dirs ⊃ mkinode (new_child_inode.ino, dirs[new_child_inode.ino].meta, true, dirs[new_child_inode.ino].nlink, dirs[new_child_inode.ino].nsubdirs, dirs[new_child_inode.ino].size) ;mkinode (new_child_inode.ino, files[new_child_inode.ino].meta, false, files[new_child_inode.ino].nlink, 0, files[new_child_inode.ino].size) )}; old_inode := (m3 ∈ dirs ⊃ mkinode(m3, dirs[m3].meta, true, dirs[m3].nlink, dirs[m3].nsubdirs, dirs[m3].size) ;mkinode(m3, files[m3].meta, false, files[m3].nlink, 0, files[m3].size) ); new_inode := (m3 ∈ dirs ⊃ mkinode(m3, dirs[m3].meta, true, dirs[m3].nlink, dirs[m3].nsubdirs, dirs[m3].size) ;mkinode(m3, files[m3].meta, false, files[m3].nlink, 0, files[m3].size) ); err := ESUCCESS; asynced := ?⟩ ( afs-cons(dirs, files) → dirs = abs-dirs (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)] [adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6) ], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3]) ∧ files = abs-files (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)] [adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6) ], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3]) ∧ orphans (fs0[adr1, dentrynode(dentrykey(m3, str), 0)][adr2, dentrynode(dentrykey(m3, str0), m)] [adr3, inodenode(inodekey(m3), md0, true, m4, m5, m6) ], (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2][inodekey(m3), adr3]) = orphans(fs0, ri0) ∧ (asynced → boolvar2) ∧ mkinode(m3, md0, true, m4, m5, m6) = old_inode ∧ mkinode(m3, md0, true, m4, m5, m6) = new_inode ∧ new_dent_inode = new_child_inode ∧ negdentry(str) = old_dent ∧ mkdentry(str0, m) = new_dent ∧ ESUCCESS = err), adr1 = adr3, adr1 = adr2, adr2 = adr3, m3 = 0, m6 = 0, adr3 ∈ (ri0 -- dentrykey(m3, str))[dentrykey(m3, str0), adr2], dentrykey(m3, str0) ∈ ri0, adr1 ∈ fs0, adr2 ∈ fs0, adr3 ∈ fs0, adr2 ∈ ri0 -- dentrykey(m3, str), old_dent.ino ∈ dirs1, m4 = 0 ∧ m3 ≠ ROOT_INO

Heuristic symbolic execution applied rule assign right

And closed the goal!

Rule argument

Additional information

Used simplifier rules: ⊦ dirs[ino, ad][ino0] = (ino0 = ino ∧ ino ∈ dirs ⊃ ad;dirs[ino0]); (s)%⊦ ino ∈ abs-dirs(fs, ri) ↔ inodekey(ino) ∈ ri ∧ fs[ri[inodekey(ino)]].directory; (s)%⊦ inodekey(ino) ∈ ri ∧ fs[ri[inodekey(ino)]].directory → abs-dirs(fs, ri)[ino] = abs-dir(ino, fs, ri); (s)%⊦ abs-dir(ino, fs, ri) = mkdir (fs[ri[inodekey(ino)]].size, fs[ri[inodekey(ino)]].meta, fs[ri[inodekey(ino)]].nlink, fs[ri[inodekey(ino)]].nsubdirs, abs-children(ino, fs, ri)); (s)% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)%⊦ mkdir(m, md, m0, m1, entries).entries:= entries0 = mkdir(m, md, m0, m1, entries0); (s)% ⊦ dirs[ino, ad][ino, ad0] = dirs[ino, ad0]; (s)% ⊦ mkdir(m, md, m0, m1, entries).size = m; (s)%⊦ mkdir(m, md, m0, m1, entries).size:= m2 = mkdir(m2, md, m0, m1, entries); (s)% ⊦ mkdentry(str, m).ino = m; (s)% ⊦ n ≥ m ↔ m ≤ n; (s)% ⊦ ino ∈ dirs[ino0, ad] ↔ ino ∈ dirs; (s)% ⊦ mkdentry(str, m).dentry?; (s)%⊦ dentrykey(ino, str) ∈ ri ∧ ubifs-cons(fs, ri, ro, fi, fo, log) → fs[ri[inodekey(ino)]].directory; (ss)% ⊦ (ad.entries:= entries).size = ad.size; (s)