| of[fd] = mkfile(m, mode, m0), files[m] = mkfile(m1, md, # links(m, dirs), content), abs-of(of)[fd] = mkfh(fid, mode0, m2), root.dir?, dom of < ino2, m1 < m0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), fd ∈ of, m ∈ files, n0 ≤ # buf0, psynced → asynced ⊦ (¬ n ≤ n0 ∨ ¬ of[fd].pos + n ≤ files[of[fd].ino].size) ∧ ⟨n0 := 0⟩ ((psynced → asynced) ∧ 0 = n0), ∃ n1. n1 ≤ n0 ∧ of[fd].pos + n1 ≤ files[of[fd].ino].size ∧ ⟨n0 := n1; buf := copy(abs-files(files)[fid].content, m2, buf0, 0, n0); ofh := abs-of(of)[fd, mkfh(fid, mode0, m2 + n0)]⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0), mode ≠ MODE_R ∧ mode ≠ MODE_RW |
of[fd] = mkfile(m, mode, m0), files[m] = mkfile(m1, md, # links(m, dirs), content), root.dir?, dom of < ino2, m1 < m0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), fd ∈ of, m ∈ files, n0 ≤ # buf0, psynced → asynced ⊦ (¬ n ≤ n0 ∨ ¬ of[fd].pos + n ≤ files[of[fd].ino].size) ∧ ⟨n0 := 0⟩ ((psynced → asynced) ∧ 0 = n0), ∃ n1. n1 ≤ n0 ∧ of[fd].pos + n1 ≤ files[of[fd].ino].size ∧ ⟨n0 := n1; buf := copy(abs-files(files)[⌜m⌝ ].content, m0, buf0, 0, n0); ofh := abs-of(of[fd, mkfile(m, mode, m0 + n0)])⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0), mode ≠ MODE_R ∧ mode ≠ MODE_RW
Used simplifier rules: ⊦ abs-of(of)[fd, mkfh(⌜ino⌝ , mode, n)] = abs-of(of[fd, mkfile(ino, mode, n)]); (s)% ⊦ mkfile(m, mode, m0).mode = mode; (s)% ⊦ mkfile(m, mode, m0).pos = m0; (s)% ⊦ mkfile(m, mode, m0).ino = m; (s)%⊦ mkfh(fid, mode, m) = mkfh(fid0, mode0, m0) ↔ fid = fid0 ∧ mode = mode0 ∧ m = m0; (ws)%fd ∈ of ⊦ abs-of(of)[fd] = mkfh(⌜of[fd].ino⌝ , of[fd].mode, of[fd].pos); (s)