| err = ESUCCESS, err0 = err1, f = fs[fh.fid], fh = ofh[fd], n0 = n1, root.dir?, fids-cons(root, fs, ofh), pre-read(fd, n0, err, user, root, fs, ofh), fh.fid ∈ fs, fd ∈ ofh, n1 ≤ # buf, fh.pos + n ≤ # f.content, n ≤ n0, 0 + n ≤ # buf ⊦ fids-cons(root, fs, ofh[fd, ofh[fd].pos:= (fh.pos + n)]) |
⊦ fids-cons(tree0, fs0, ofh0) → (fids-cons(tree1, fs1, ofh1) ↔ (∀ fid. (fid ∈ fs0 ↔ fid ∈ tree0.fids ∨ fid ∈ ofh0.fids) → (fid ∈ fs1 ↔ fid ∈ tree1.fids ∨ fid ∈ ofh1.fids)))
fid ∈ fs ↔ fid ∈ root.fids ∨ fid ∈ ofh.fids, root.dir?, fids-cons(root, fs, ofh), fd ∈ ofh, ofh[fd].fid ∈ fs, n ≤ n1, ofh[fd].pos + n ≤ # fs[ofh[fd].fid].content, n1 ≤ # buf, n ≤ # buf, ofh[fd].mode = MODE_R ∨ ofh[fd].mode = MODE_RW ⊦ fid ∈ fs ↔ fid ∈ root.fids ∨ fid ∈ ofh[fd, mkfh(ofh[fd].fid, ofh[fd].mode, ofh[fd].pos + n)].fids
Used simplifier rules: fids-cons-reduce: ⊦ fids-cons(tree0, fs0, ofh0) → ( fids-cons(tree1, fs1, ofh1) ↔ (∀ fid. (fid ∈ fs0 ↔ fid ∈ tree0.fids ∨ fid ∈ ofh0.fids) → (fid ∈ fs1 ↔ fid ∈ tree1.fids ∨ fid ∈ ofh1.fids)));%let: ⊦ n ≤ n0 ∧ n0 ≤ n1 → n ≤ n1; (forward) from specification nat% ⊦ fh.pos:= m = mkfh(fh.fid, fh.mode, m); (s)%⊦ pre-read(fd, n, ESUCCESS, user, root, fs, ofh) ↔ fd ∈ ofh ∧ (ofh[fd].mode = MODE_R ∨ ofh[fd].mode = MODE_RW); (s)%c: ⊦ m + n = n + m; from specification nat-basic%a: ⊦ (m + n0) + n1 = m + n0 + n1; from specification nat-basic% ⊦ n + 0 = n; (s)