| of[fd] = mkfile(m, mode, m0), files[m] = mkfile(m1, md, m2, content), buf = buf0, err0 = ESUCCESS, f = abs-files(files)[fh.fid], fh = ofh[fd], ofh = abs-of(of), root.dir?, dom of < ino2, m1 < m0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), fd ∈ ofh, fd ∈ of, fh.fid ∈ abs-files(files), n0 ≤ # buf0, psynced → asynced ⊦ (∀ n. ¬(n ≤ n0 ∧ fh.pos + n ≤ # f.content)) ∧ ⟨n0 := 0⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0 ∧ ESUCCESS = err0), ∃ n. (n ≤ n0 ∧ fh.pos + n ≤ # f.content) ∧ ⟨n0 := n; buf := copy(f.content, fh.pos, buf, 0, n0); ofh[fd].pos := fh.pos + n0⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0 ∧ ESUCCESS = err0), mode ≠ MODE_R ∧ mode ≠ MODE_RW |
files[m] = mkfile(m1, md, # links(m, dirs), content), of[fd] = mkfile(m, mode, m0), root.dir?, m1 < m0, dom of < ino2, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), m ∈ files, fd ∈ of, n0 ≤ # buf0, psynced → asynced ⊦ (¬ n ≤ n0 ∨ ¬ of[fd].pos + n ≤ files[of[fd].ino].size) ∧ ⟨n0 := 0⟩ ((psynced → asynced) ∧ 0 = n0), ∃ n1. n1 ≤ n0 ∧ of[fd].pos + n1 ≤ files[of[fd].ino].size ∧ ⟨n0 := n1; buf := copy(abs-files(files)[abs-of(of)[fd].fid].content, abs-of(of)[fd].pos, buf0, 0, n0); ofh := abs-of(of)[fd, mkfh(abs-of(of)[fd].fid, abs-of(of)[fd].mode, abs-of(of)[fd].pos + n0)]⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0), mode ≠ MODE_R ∧ mode ≠ MODE_RW
Used simplifier rules: afs-cons-file-nlink: ⊦ afs-cons(dirs, files) ∧ ino ∈ files ∧ files[ino] = mkfile(m, md, n, content) → # links(ino, dirs) = n; (forward) from specification afs-base% ⊦ fh.pos:= m = mkfh(fh.fid, fh.mode, m); (s)% ⊦ ⌜m⌝ .n = m; (s)%¬ # σ0 < ⌜n⌝ ⊦ #(σ0 to n) = ⌜n⌝ ; (s)% ⊦ ¬ ∞ < n∞; (s)% ⊦ # content.stream = ∞; (s)%finp(σ) ⊦ # σ.buf = (# σ).n; (s)% ⊦ finp(σ0 to m); (s)% ⊦ mkfile(m, mode, m0).ino = m; (s)% ⊦ mkfile(md, buf).content = buf; (s)%⊦ ino ∈ files → abs-files(files)[⌜ino⌝ ] = mkfile (files[ino].meta, (files[ino].content.stream to files[ino].size).buf); (s)% ⊦ mkfh(fid, mode, m).pos = m; (s)% ⊦ fd ∈ abs-of(of) ↔ fd ∈ of; (s)% ⊦ ⌜ino⌝ ∈ abs-files(files) ↔ ino ∈ files; (s)% ⊦ mkfh(fid, mode, m).fid = fid; (s)%fd ∈ of ⊦ abs-of(of)[fd] = mkfh(⌜of[fd].ino⌝ , of[fd].mode, of[fd].pos); (s)