[Imprint][Data Privacy Statement][E-Mail]



View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 40 from proof refine-rename-overwrite-keep-parent-identity (previous step)

adr5 = adr1, adr6 = adr2, dirs = abs-dirs(fs, ri), files = abs-files(fs, ri), key = inodekey(fs[ri[dentrykey(m6, str)]].ino), m = fs[ri[dentrykey(m6, str)]].ino, m7 = fs[ri[inodekey(m6)]].nlink, m8 = fs[ri[inodekey(m6)]].nsubdirs, m9 = fs[ri[inodekey(m6)]].size, nd = inodenode(key, md, boolvar3, m0, m1, m2), nd0 = inodenode(inodekey(m6), md1, true, m7, m8, m9), nd1 = dentrynode(dentrykey(m6, new_dent.name), new_dent.ino), nd2 = dentrynode(dentrykey(m6, new_dent.name), 0), new_dent = mkdentry(str, fs[ri[dentrykey(m6, str)]].ino), ro = orphans(fs, ri), ro0 = orphans(fs, ri), new_dent.dentry?, fs[ri[inodekey(m6)]].directory, fo.inodes?, orphans(fs, ri).inodes?, afs-cons(abs-dirs(fs, ri), abs-files(fs, ri)), file-node-cons(fs, ri), log-cons(log, fs), node-cons(nd.key, nd), node-cons(nd0.key, nd0), node-cons(nd1.key, nd1), node-cons(nd2.key, nd2), orphans-cons(fs, ri, orphans(fs, ri)), replay-cons-strong(fs, ri, orphans(fs, ri), fi, fo, log), ri-cons(ri, fs), ri-inj(fi), ri-inj(ri), ubifs-cons(fs, ri, orphans(fs, ri), fi, fo, log), dentrykey(m6, str) ∈ ri, inodekey(fs[ri[dentrykey(m6, str)]].ino) ∈ ri, inodekey(m6) ∈ ri, 1 ≤ fs[ri[inodekey(m6)]].size, fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory → dentrykeys(inodekey(fs[ri[dentrykey(m6, str)]].ino), ri) = ∅, fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory → abs-children(fs[ri[dentrykey(m6, str)]].ino, fs, ri) = ∅, boolvar4 → boolvar0, m0 = 1 → links(fs[ri[dentrykey(m6, str)]].ino, fs, ri) = ∅ ++ dentrykey(m6, str), boolvar2 → 1 ≤ fs[ri[inodekey(m6)]].nsubdirs, fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ m0 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m2 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].size ∧ m1 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nsubdirs ∧ boolvar3 ∨ ¬ fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ m0 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m1 = 0 ∧ ¬ boolvar3, fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ m3 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m5 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].size ∧ m4 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nsubdirs ∧ boolvar2 ∨ ¬ fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ m3 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m4 = 0 ∧ ¬ boolvar2, ¬ fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ ¬ boolvar3 ∧ m0 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m1 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nsubdirs ∨ fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ boolvar3 ∧ m0 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m1 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nsubdirs ∧ m2 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].size, ¬ fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ ¬ boolvar2 ∧ m3 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m4 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nsubdirs ∨ fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].directory ∧ boolvar2 ∧ m3 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nlink ∧ m4 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].nsubdirs ∧ m5 = fs[ri[inodekey(fs[ri[dentrykey(m6, str)]].ino)]].size, links(m6, abs-dirs(fs, ri)) ≠ ∅ ∨ m6 = ROOT_INO, fs[ri[inodekey(m6)]].nlink ≠ 0 ∨ m6 = ROOT_INO ⊦ [choose adr1, adr2, adr3, adr4 with new(adr1 ' + adr2 ' + (adr3 ' + adr4), fs) ∧ ¬ dups(adr1 ' + adr2 ' + adr3 ' + adr4 ') in {adr6 := adr1, adr5 := adr2, adr0 := adr3, adr := adr4; fs := fs[adr6, nd2][adr5, nd1][adr0, nd0][adr, nd], log := (((log + adr6) + adr5) + adr0) + adr, err := ESUCCESS} ifnone err := ENOSPC; boolvar := ?; nd0 := inodenode(inodekey(m6), md1, true, m7, m8, m9); old_dent := new_dent; old_parent_inode := mkinode(m6, md1, true, m7, m8, m9); new_child_inode := mkinode(m, md, boolvar3, m0, m1, m2); boolvar0 := boolvar, adr1 := adr5; if err = ESUCCESS then {aubifs_core_index_remove#(dentrykey(m6, old_dent.name), fi, ro0, fo, fs, log, boolvar0; ri); aubifs_core_index_store#(dentrykey(m6, new_dent.name), adr1, fi, ro0, fo, fs, log, boolvar0; ri); aubifs_core_index_store#(inodekey(m6), adr0, fi, ro0, fo, fs, log, boolvar0; ri); aubifs_core_index_store#(key, adr, fi, ro0, fo, fs, log, boolvar0; ri); nd := inodenode(key, md, boolvar3, m0, m1, m2); if nd.nlink = 0 then aubifs_core_orphans_insert#(key, ri, fi, fo, fs, log, boolvar0; ro0); new_dent := mkdentry(new_dent.name, old_dent.ino); old_dent := negdentry(old_dent.name); old_parent_inode := mkinode(old_parent_inode.ino, nd0.meta, nd0.directory, nd0.nlink, nd0.nsubdirs, nd0.size); new_child_inode := mkinode(new_child_inode.ino, nd.meta, nd.directory, nd.nlink, nd.nsubdirs, nd.size)}] ( ubifs-cons(fs, ri, ro0, fi, fo, log) ∧ replay-cons-strong(fs, ri, ro0, fi, fo, log) ∧ file-node-cons(fs, ri) ∧ orphans-cons(fs, ri, ro0) ∧ ri-inj(ri) ∧ log-cons(log, fs) ∧ ro0.inodes? → ⟪new_parent_inode := old_parent_inode⟫ ⟨old_dent2 := mkdentry(str, m); old_dent_inode0 := mkinode(m, md0, boolvar2, m3, m4, m5); old_dent1 := mkdentry(str, m); new_dent_inode := mkinode(m, md, boolvar3, m0, m1, m2); old_inode := mkinode(m6, md1, true, m7, m8, m9); old_dent_inode := mkinode(m, md0, boolvar2, m3, m4, m5); new_inode := mkinode(m6, md1, true, m7, m8, m9); afs_rename#(; old_inode, new_inode, old_dent_inode, new_dent_inode, old_dent1, old_dent2, err0, dirs, files; boolvar4)⟩ ( dirs = abs-dirs(fs, ri) ∧ files = abs-files(fs, ri) ∧ orphans(abs-dirs(fs, ri), abs-files(fs, ri)) = abs-keys(ro0) ∧ (boolvar4 → boolvar0) ∧ old_parent_inode = old_inode ∧ new_parent_inode = new_inode ∧ old_dent_inode0 = old_dent_inode ∧ new_child_inode = new_dent_inode ∧ old_dent = old_dent1 ∧ new_dent = old_dent2 ∧ err = err0)), fs[ri[dentrykey(m6, str)]].ino = ROOT_INO, fs[ri[inodekey(m6)]].size = 0, m0 = 0, fs[ri[inodekey(m6)]].nlink = 0 ∧ m6 ≠ ROOT_INO

Heuristic symbolic execution applied rule choose right

And obtained the following new goals

Rule argument

Additional information