[Imprint][Data Privacy Statement][E-Mail]



View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 152 from proof refine-rmdir (previous step)

1 = fs0[ri0[inodekey(m2)]].nlink, fs0[ri0[inodekey(m)]] = inodenode(key0, md1, true, m3, m0 + 1, m1 + 1), fs0[ri0[dentrykey(m, str)]] = dentrynode(key, m2), fs0[ri0[inodekey(m2)]] = inodenode(key1, md2, true, 1, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size), abs-children(m2, fs0, ri0) = ∅, c_inode = p_inode1, dent = old_dent, dentrykeys(inodekey(m2), ri0) = ∅, dirs = abs-dirs(fs0, ri0), err = err0, files = abs-files(fs0, ri0), links(m2, fs0, ri0) = ∅ ++ dentrykey(m, str), old_dent = mkdentry(str, m2), p_inode = p_inode0, p_inode0 = mkinode(m, md, true, m3, m0 + 1, m1 + 1), p_inode1 = mkinode(m2, md0, true, 1, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size), fs0[ri0[inodekey(m2)]].directory, fo.inodes?, orphans(fs0, ri0).inodes?, afs-cons(abs-dirs(fs0, ri0), abs-files(fs0, ri0)), file-node-cons (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]), file-node-cons(fs0, ri0), log-cons (log0, fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ]), log-cons(log0, fs0), orphans-cons (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3], orphans(fs0, ri0) ++ inodekey(m2)), orphans-cons(fs0, ri0, orphans(fs0, ri0)), pre-rmdir(p_inode, c_inode, dent, dirs, files), replay-cons-strong (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3], orphans(fs0, ri0) ++ inodekey(m2), fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 '), replay-cons-strong(fs0, ri0, orphans(fs0, ri0), fi, fo, log0), ri-cons(ri0, fs0), ri-inj((ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]), ri-inj(fi), ri-inj(ri0), ubifs-cons (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3], orphans(fs0, ri0) ++ inodekey(m2), fi, fo, ((log0 + adr1 ') + adr2 ') + adr3 '), ubifs-cons(fs0, ri0, orphans(fs0, ri0), fi, fo, log0), dentrykey(m, str) ∈ ri0, ri0[dentrykey(m, str)] ∈ fs0, inodekey(m2) ∈ ri0, ri0[inodekey(m2)] ∈ fs0, ri0[inodekey(m)] ∈ fs0, inodekey(m) ∈ ri0, asynced → boolvar0, m3 ≠ 0 ∨ m = ROOT_INO, links(m, abs-dirs(fs0, ri0)) ≠ ∅ ∨ m = ROOT_INO ⊦ ⟨fail#(; ; err); asynced := ?⟩ ( afs-cons(dirs, files) → dirs = abs-dirs (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]) ∧ files = abs-files (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]) ∧ orphans (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]) = orphans(fs0, ri0) ++ inodekey(m2) ∧ (asynced → boolvar) ∧ mkinode(m, md, true, m3, m0, m1) = p_inode ∧ mkinode(m2, md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) = c_inode ∧ negdentry(str) = dent ∧ ESUCCESS = err), ⟨let p_ino = p_inode.ino in {dirs[p_ino].entries := dirs[p_ino].entries -- dent.name; dirs[p_ino].size := dirs[p_ino].size - 1; dirs[p_ino].nsubdirs := dirs[p_ino].nsubdirs - 1; let ino = dent.ino in afs_drop_nlink#(ino; dirs, files); dent := negdentry(dent.name); afs_inode_sync#(p_inode; dirs, files); afs_inode_sync#(c_inode; dirs, files); p_inode := getinode(p_inode.ino, dirs, files); c_inode := getinode(c_inode.ino, dirs, files); err := ESUCCESS}; asynced := ?⟩ ( afs-cons(dirs, files) → dirs = abs-dirs (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]) ∧ files = abs-files (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]) ∧ orphans (fs0[adr1, inodenode(inodekey(m), md, true, m3, m0, m1)][adr2, dentrynode(dentrykey(m, str), 0)] [adr3, inodenode(inodekey(m2), md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) ], (ri0[inodekey(m), adr1] -- dentrykey(m, str))[inodekey(m2), adr3]) = orphans(fs0, ri0) ++ inodekey(m2) ∧ (asynced → boolvar) ∧ mkinode(m, md, true, m3, m0, m1) = p_inode ∧ mkinode(m2, md0, true, 0, fs0[ri0[inodekey(m2)]].nsubdirs, fs0[ri0[inodekey(m2)]].size) = c_inode ∧ negdentry(str) = dent ∧ ESUCCESS = err), adr1 = adr3, adr1 = adr2, adr2 = adr3, m = 0, m2 = 0, m2 = ROOT_INO, adr1 ∈ fs0, adr2 ∈ fs0, adr3 ∈ fs0, m3 = 0 ∧ m ≠ ROOT_INO

Heuristic simplifier applied rule simplifier

And obtained the following new goals

Rule argument

Additional information

Used simplifier rules: ⊦ inodenode(key, md, boolvar, m, m0, m1).directory ↔ boolvar; (s)% ⊦ dentrynode(key, m).ino = m; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).nlink = m; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).size = m1; (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ m + n = m + n0 ↔ n = n0; (s)% ⊦ inodenode(key, md, boolvar, m, m0, m1).nsubdirs = m0; (s)%⊦ getinode(ino, dirs, files) = (ino ∈ dirs ⊃ mkinode (ino, dirs[ino].meta, true, dirs[ino].nlink, dirs[ino].nsubdirs, dirs[ino].size) ;mkinode (ino, files[ino].meta, false, files[ino].nlink, 0, files[ino].size) ); (s)% ⊦ mkdentry(str, m) ≠ negdentry(str0); (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ mkdir(m, md, m0, m1, entries).nsubdirs = m1; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nsubdirs = m1; (s)% ⊦ mkdir(m, md, m0, m1, entries).size = m; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).size = m2; (s)% ⊦ mkdir(m, md, m0, m1, entries).nlink = m0; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nlink = m0; (s)% ⊦ valid-dir-ino(ino, dirs, files) ↔ ino ∈ dirs; (s)%⊦ valid-dir-inode(inode, dirs, files) ↔ valid-dir-ino(inode.ino, dirs, files) ∧ inode.nlink = dirs[inode.ino].nlink ∧ inode.size = dirs[inode.ino].size ∧ inode.nsubdirs = dirs[inode.ino].nsubdirs ∧ inode.directory; (s)% ⊦ dir-empty(ino, dirs, files) ↔ dirs[ino].entries = ∅; (s)% ⊦ mkdentry(str, m).dentry?; (s)%⊦ dentrykey(ino, str) ∈ ri → abs-children(ino, fs, ri)[str] = fs[ri[dentrykey(ino, str)]].ino; (s)% ⊦ str ∈ abs-children(ino, fs, ri) ↔ dentrykey(ino, str) ∈ ri; (s)% ⊦ mkdir(m, md, m0, m1, entries).entries = entries; (s)%⊦ abs-dir(ino, fs, ri) = mkdir (fs[ri[inodekey(ino)]].size, fs[ri[inodekey(ino)]].meta, fs[ri[inodekey(ino)]].nlink, fs[ri[inodekey(ino)]].nsubdirs, abs-children(ino, fs, ri)); (s)%⊦ inodekey(ino) ∈ ri ∧ fs[ri[inodekey(ino)]].directory → abs-dirs(fs, ri)[ino] = abs-dir(ino, fs, ri); (s)% ⊦ mkdentry(str, m).name = str; (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)%⊦ ino ∈ abs-dirs(fs, ri) ↔ inodekey(ino) ∈ ri ∧ fs[ri[inodekey(ino)]].directory; (s)%⊦ valid-parent-ino(ino, dirs, files) ↔ ino ∈ dirs ∧ (links(ino, dirs) ≠ ∅ ∨ ino = ROOT_INO); (s)%⊦ valid-dentry(ino, dent, dirs, files) ↔ valid-parent-ino(ino, dirs, files) ∧ valid-ino(dent.ino, dirs, files) ∧ dent.name ∈ dirs[ino].entries ∧ dent.ino = dirs[ino].entries[dent.name] ∧ dent.dentry?; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).ino = m; (s)% ⊦ mkdentry(str, m).ino = m; (s)%⊦ pre-rmdir(p_inode, c_inode, dent, dirs, files) ↔ dent.ino ≠ ROOT_INO ∧ valid-dentry(p_inode.ino, dent, dirs, files) ∧ dir-empty(dent.ino, dirs, files) ∧ valid-dir-inode(p_inode, dirs, files) ∧ valid-dir-inode(c_inode, dirs, files) ∧ c_inode.ino = dent.ino; (s)