Proof step 52 from proof refine-gc (previous step)

Heuristic symbolic execution applied rule let right

And obtained the following new goals

• Proof step 53:

  jvalid ↔ jvalid4, err = ESUCCESS, fi = ri, fi0 = fi1, fi2 = ri, fi3 = fi1, fs = nodes(gstore2 ↓, jro0), gstore = gstore1, gstore0 = gstore2, jro = jro0, lnum = n1, log = abs-log(nx, gstore2 ↓), n0 = lnum0, remove-refsize0(gstore1) = gstore1, elems nx ∩ jro0 = ∅, dom gstore1 ∪ elems nx = dom gstore2 ∪ jro0, jro1.keys.inodes?, p_os.keys.inodes?, fi1.inos < pmaxino, p_os < pmaxino, jro1 < jmaxino, ri.inos < jmaxino, inv(gstore2 \ jro0), inv(gstore1), log-cons(abs-log(nx, gstore2 ↓), nodes(gstore2 ↓, jro0)), refsize-cons(gstore1, range fi1), refsize-cons(gstore2, range ri), ri-cons(ri, nodes(gstore2 ↓, jro0)), ri-inj(fi1), ri-inj(ri), n1 ∈ dom gstore0, pmaxino ≤ jmaxino, fi1.lebs ⊆ dom gstore1, ri.lebs ⊆ dom gstore2, jvalid3 ∧ nx ≠ [] → valid-journal-head(nx, gstore2, jro0), jvalid5 → jvalid4 ⊦ [debug#("gjournal: garbage collecting LEB " + lnum.toString); index_get_gblock_refsize#(lnum, fi, fi0, jro0, gstore2, gstore1, nx, pmaxino, p_os, jvalid4; ; n); if n ≠ 0 then let ax = [], gndx = [], ndx = [] in {index_read_gblock_nodes#(lnum, fi, fi0, jro0, gstore2, gstore1, nx, pmaxino, p_os, jvalid4; ax, gndx; err); if err ≠ ESUCCESS then debug#("gjournal: failed to read LEB " + lnum.toString + " during GC") else gjournal_gc_referenced_nodes#(lnum, fi, fi0, jro0, gstore2, gstore1, nx, pmaxino, p_os, jvalid4; ax, gndx; ndx, err); if err = ESUCCESS then {gjournal_gc_copy#(jvalid1, fi0, gstore1, pmaxino, p_os; ndx, jvalid3, jmaxino0, jmaxino, fi, jro0, gstore2, nx, jvalid4; err); if err ≠ ESUCCESS then debug#("gjournal: failed to copy nodes of LEB " + lnum.toString + " to journal head during GC")}}; if err = ESUCCESS then index_sync#(fi, fi0, jro0, gstore2, gstore1, nx, pmaxino, p_os; ; jvalid4, err); if err = ESUCCESS then index_deallocate_gnd#(lnum, fi, fi0, gstore1, nx, pmaxino, p_os, jvalid4; jro0, gstore2; err)] ( jro1 < jmaxino ∧ pmaxino ≤ jmaxino ∧ fi.inos < jmaxino ∧ jmaxino ≠ 0 ∧ (jvalid3 ∧ nx ≠ [] → valid-journal-head(nx, gstore2, jro0)) ∧ fi.lebs ⊆ dom gstore2 ∧ refsize-cons(gstore2, range fi) ∧ inv(gstore2 \ jro0) ∧ elems nx ∩ jro0 = ∅ ∧ ¬ dups(nx) ∧ dom gstore1 ∪ elems nx = dom gstore2 ∪ jro0 ∧ ri-inj(fi) → ⟨aubifs_core_journal_gc#(fi1, jro1.keys, p_os.keys; ri, fs, log; jvalid5)⟩ (fi = ri ∧ log = abs-log(nx, gstore2 ↓) ∧ fs = nodes(gstore2 ↓, jro0) ∧ (jvalid5 → jvalid4))), jmaxino = 0, pmaxino = 0, dups(nx), n1 ∈ nx

Rule argument

Additional information