| key.inode?, fi.inos < jmaxino, jro < jmaxino, pmaxino ≤ jmaxino ⊦ ⟪jmaxino := max(key.ino + 1, jmaxino)⟫ (jro ++ key.ino < jmaxino ∧ pmaxino ≤ jmaxino ∧ fi.inos < jmaxino ∧ jmaxino ≠ 0), jmaxino = 0 |
Used simplifier rules: ⊦ ns < n → ns ++ m < max(m + 1, n); (s)%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic%c: ⊦ m + n = n + m; from specification nat-basic% ⊦ ns < n → ns < max(m + 1, n); (s)% ⊦ m ≤ n ↔ ¬ n < m; (ss)%f: ⊦ m < n → n ≠ 0; (forward) from specification nat-basic%fle: ⊦ m < n ∧ n ≤ n0 → m < n0; (forward) from specification nat% ⊦ m < n → n ≠ 0; (s)% ⊦ ¬ max(n, m) < m; (s)% ⊦ max(n, m) = 0 ↔ n = 0 ∧ m = 0; (ws)% ⊦ m + 1 ≠ 0; (s)