| tree[p] = dnode(md, sdt), ((abs|(tree, ROOT_INO, p, ino0) * ino0 => mkdir(# entries + 1, md, m0, m1, entries[str, ino1]) * abs(sdt, entries) * D))(dirs), p ∈ tree, D ⊆ abs(tree0, ino1) ⊦ (( ino0 => mkdir(# entries + 1, md, m0, m1, entries[str, ino1]) * (abs(tree0, ino1) * abs(sdt, entries)) * abs|(tree[p, dnode(md, sdt[str, tree0])], ROOT_INO, p, ino0)) )(dirs), str ∈ sdt, str ∈ entries, p ≠ ε ∧ parent(p) ∈ tree ∧ tree[parent(p)].dir? |
Used simplifier rules: ⊦ p + str ' ≠ ε; (s)%a: ⊦ (p + p0) + p1 = p + p0 + p1; from specification list[path]% ⊦ p + q ∈ tree ↔ p ∈ tree ∧ q ∈ tree[p]; (s)% ⊦ ¬ tree.dir? → (p ∈ tree ↔ p = ε); (s)% ⊦ str ' ≠ ε; (s)% ⊦ tree[ε] = tree; (s)% ⊦ ε ∈ tree; (s)% ⊦ abs|(tree, ino, ε, ino0) = (emp ∧ ⌜ino = ino0⌝ ); (s)% ⊦ (⌜bv⌝ ∧ D) * D0 = (⌜bv⌝ ∧ D * D0); (s)% ⊦ emp * D = D; (s)%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%and-ass: ⊦ ((D ∧ D0) ∧ D1) = (D ∧ D0 ∧ D1); from specification heap-sep[dir-heap]%and-com: ⊦ (D ∧ D0) = (D0 ∧ D); from specification heap-sep[dir-heap]% ⊦ ((D ∧ D0))(dirs) ↔ D(dirs) ∧ D0(dirs); (s)% ⊦ ⌜bv⌝ (dirs) ↔ bv; (s)% ⊦ tree[ε, tree0] = tree0; (s)% ⊦ ⌜true⌝ = true; (s)% ⊦ (true ∧ D) = D; (s)% ⊦ D ⊆ D0 ∧ ((D1 * D))(dirs) → ((D1 * D0))(dirs); (s)%p ≠ ε ⊦ q = parent(p) ∧ str = p.last ↔ p = q + str '; (elim) Used terms: p, q, str0