| root[q0].dir? ↔ ino2 ∈ dirs, files[entries0[str]] = mkfile(m, md, # links(entries0[str], dirs), content), dirs[ino1] = mkdir(# entries0, md0, # links(ino1, dirs), m2, entries0), dent = negdentry((q0 + str0 ').last), err = ESUCCESS, err1 = ESUCCESS, err2 = err1, ino = ino2, inode = getinode(ino, dirs, files), inode0 = mkinode(entries0[str], md, false, # links(entries0[str], dirs), 0, m), root.dir?, root[q].dir?, inode.directory, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q0, ROOT_INO, ino2, dirs, files), ispath(q, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pre-iget(ino, dirs, files), pw(user, inode.meta), px(user, inode.meta), px(user, md0), px-parent(user, q0, ROOT_INO, dirs, files), px-parent(user, q, ROOT_INO, dirs, files), entries0[str] ∈ files, ino1 ∈ dirs, str ∈ entries0, psynced → asynced, links(ino1, dirs) ≠ ∅ ∨ ino1 = ROOT_INO ⊦ [afs_lookup#(ino, dirs, files, asynced; dent, err); if err = ESUCCESS then err := EEXISTS else if err = ENOENT then err := ESUCCESS; new_inode := inode, new_dent := negdentry((q0 + str0 ').last); err1 := err; if err1 = ESUCCESS then afs_check_commit#(dirs, files; err1; asynced); fs := abs-files(files); if err1 = ESUCCESS then {c_inode := getinode(mkdentry(str, entries0[str]).ino, dirs, files); afs_link#(mkdentry(str, entries0[str]); new_inode, c_inode, new_dent, err1, dirs, files; asynced)}] ( of-cons(of, dirs, files) ∧ afs-cons(dirs, files) → ⟨posix_link#(q + str ', q0 + str0 ', user, fs, abs-of(of); err0, root; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err1 = err0)), q0 + str0 ' = ε, root[q + str '].dir?, entries0[str] ∈ dirs |
files[entries0[str]] = mkfile(m, md, # links(entries0[str], dirs), content), dirs[ino1] = mkdir(# entries0, md0, # links(ino1, dirs), m2, entries0), dent = negdentry(str0), err = ESUCCESS, root.dir?, root[q].dir?, root[q0].dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q0, ROOT_INO, ino2, dirs, files), ispath(q, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pw(user, dirs[ino2].meta), px(user, md0), px(user, dirs[ino2].meta), px-parent(user, q0, ROOT_INO, dirs, files), px-parent(user, q, ROOT_INO, dirs, files), entries0[str] ∈ files, ino1 ∈ dirs, str ∈ entries0, ino2 ∈ dirs, ¬ root[q + str '].dir?, ¬ entries0[str] ∈ dirs, psynced → asynced, links(ino1, dirs) ≠ ∅ ∨ ino1 = ROOT_INO ⊦ [afs_lookup#(ino2, dirs, files, asynced; dent, err); if err = ESUCCESS then err := EEXISTS else if err = ENOENT then err := ESUCCESS; new_inode := (ino2 ∈ dirs ⊃ mkinode(ino2, dirs[ino2].meta, true, dirs[ino2].nlink, dirs[ino2].nsubdirs, dirs[ino2].size) ;mkinode(ino2, files[ino2].meta, false, files[ino2].nlink, 0, files[ino2].size) ), new_dent := negdentry((q0 + str0 ').last); err1 := err; if err1 = ESUCCESS then afs_check_commit#(dirs, files; err1; asynced); fs := abs-files(files); if err1 = ESUCCESS then {c_inode := getinode(mkdentry(str, entries0[str]).ino, dirs, files); afs_link#(mkdentry(str, entries0[str]); new_inode, c_inode, new_dent, err1, dirs, files; asynced)}] ( of-cons(of, dirs, files) ∧ afs-cons(dirs, files) → ⟨posix_link#(q + str ', q0 + str0 ', user, fs, abs-of(of); err0, root; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err1 = err0))
Used simplifier rules: ⊦ mkinode(m, md, boolvar, m0, m1, m2).meta = md; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)% ⊦ pre-iget(ino, dirs, files) ↔ valid-ino(ino, dirs, files); (s)%⊦ getinode(ino, dirs, files) = (ino ∈ dirs ⊃ mkinode (ino, dirs[ino].meta, true, dirs[ino].nlink, dirs[ino].nsubdirs, dirs[ino].size) ;mkinode (ino, files[ino].meta, false, files[ino].nlink, 0, files[ino].size) ); (s)% ⊦ p + str ' ≠ ε; (s)%a: ⊦ (p + p0) + p1 = p + p0 + p1; from specification list[path]% ⊦ (p + str ').last = str; (s)