| fd = ino1, ofh = abs-of(of), root.dir?, dom of < ino2, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), psynced → asynced, ⌊err1⌋ ∨ err1 = ESUCCESS ∧ ispath(path, ROOT_INO, ino0, dirs, files) ∧ px-parent(user, path, ROOT_INO, dirs, files) ∨ err1 = ENOENT ∧ ¬ ispath(path, ROOT_INO, dirs, files) ∨ err1 = EACCESS ∧ path ≠ ε ∧ p' ⊑ parent(path) ∧ ispath(p', ROOT_INO, dirs, files) ∧ ¬ px(user, p', ROOT_INO, dirs, files) ⊦ ⟨posix_open#(path, mode, user, root, abs-files(files); ino1, err0, ofh)⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ fd = ino1 ∧ err1 = err0), err1 = ESUCCESS |
fd = ino1, ofh = abs-of(of), err1 ≠ ESUCCESS, root.dir?, dom of < ino2, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), psynced → asynced, ⌊err1⌋ ∨ err1 = ENOENT ∧ ¬ ispath(path, ROOT_INO, dirs, files) ∨ err1 = EACCESS ∧ path ≠ ε ∧ p' ⊑ parent(path) ∧ ispath(p', ROOT_INO, dirs, files) ∧ ¬ px(user, p', ROOT_INO, dirs, files) ⊦ ⟨posix_open#(path, mode, user, root, abs-files(files); ino1, err0, ofh)⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ fd = ino1 ∧ err1 = err0)