| files[m] = mkfile(m1, md, # links(m, dirs), content), of[fd] = mkfile(m, mode, m0), abs-files(files)[⌜m⌝ ] = mkfile(md0, buf1), root.dir?, m1 < m0, dom of < ino2, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), m ∈ files, fd ∈ of, n0 ≤ # buf0, psynced → asynced ⊦ (¬ n ≤ n0 ∨ ¬ of[fd].pos + n ≤ files[of[fd].ino].size) ∧ ⟨n0 := 0⟩ ((psynced → asynced) ∧ 0 = n0), ∃ n1. n1 ≤ n0 ∧ of[fd].pos + n1 ≤ files[of[fd].ino].size ∧ ⟨n0 := n1; buf := copy(buf1, m0, buf0, 0, n0); ofh := abs-of(of[fd, mkfile(m, mode, m0 + n0)])⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0), mode ≠ MODE_R ∧ mode ≠ MODE_RW |
files[m] = mkfile(m1, md, # links(m, dirs), content), of[fd] = mkfile(m, mode, m0), root.dir?, m1 < m0, dom of < ino2, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), of-cons(of, dirs, files), m ∈ files, fd ∈ of, n0 ≤ # buf0, psynced → asynced ⊦ (¬ n ≤ n0 ∨ ¬ of[fd].pos + n ≤ files[of[fd].ino].size) ∧ ⟨n0 := 0⟩ ((psynced → asynced) ∧ 0 = n0), ∃ n1. n1 ≤ n0 ∧ of[fd].pos + n1 ≤ files[of[fd].ino].size ∧ ⟨n0 := n1; buf := copy((content.stream to m1).buf, m0, buf0, 0, n0); ofh := abs-of(of[fd, mkfile(m, mode, m0 + n0)])⟩ (ofh = abs-of(of) ∧ (psynced → asynced) ∧ buf0 = buf ∧ 0 = n0), mode ≠ MODE_R ∧ mode ≠ MODE_RW
Used simplifier rules: ⊦ mkfile(m, md, m0, content).size = m; (s)% ⊦ mkfile(m, md, m0, content).content = content; (s)% ⊦ mkfile(md, buf) = mkfile(md0, buf0) ↔ md = md0 ∧ buf = buf0; (ws)%⊦ ino ∈ files → abs-files(files)[⌜ino⌝ ] = mkfile (files[ino].meta, (files[ino].content.stream to files[ino].size).buf); (s)