| # entries0 = m + 1, (entries0[str] ∈ dirs ⊃ mkinode(entries0[str], dirs[entries0[str]].meta, true, dirs[entries0[str]].nlink, dirs[entries0[str]].nsubdirs, dirs[entries0[str]].size) ;mkinode(entries0[str], files[entries0[str]].meta, false, files[entries0[str]].nlink, 0, files[entries0[str]].size) ) = mkinode(m5, md3, false, 0, 0, m8), 0 = m7, dirs1[entries0[str]] = mkdir(m0, md0, m1, m4, entries), dirs0[entries0[str]] = mkdir(0, md, # links(entries0[str], dirs0), m3, ∅), dirs0[ino1] = mkdir(m + 1, md2, # links(ino1, dirs0), m2, entries0), root[q + str '] = dnode(md1, ∅), files[m5] = mkfile(m6, md4, m7, content), root.dir?, root[q].dir?, dom of < ino0, abs(root, ROOT_INO)(dirs0), afs-cons(dirs, files -- m5), afs-cons(dirs0, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs0, files), of-cons(of, dirs0, files), of-cons(of, dirs, files -- m5), pw(user, md2), px(user, md2), px-parent(user, q, ROOT_INO, dirs0, files), str ∈ entries0, ino1 ∈ dirs0, entries0[str] ∈ dirs0, entries0[str] ∈ dirs1, m5 ∈ files, dirs1 ≡ dirs0[ino1, mkdir(m, md2, # links(ino1, dirs0), m2 - 1, entries0 -- str)], dirs ≡ dirs1[entries0[str], mkdir(m0, md, m1 - 1, m4, entries)], 1 ≤ m1, 1 ≤ m2, psynced → asynced0 ⊦ ⟨posix_rmdir#(q + str ', user, abs-files(files), abs-of(of); err1, root; psynced)⟩ (abs-files(files) = abs-files(files -- entries0[str]) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ ESUCCESS = err1), # links(ino1, dirs0) = 0, entries0 = ∅, ino1 = ROOT_INO, links(ino1, dirs0) = ∅, m1 = 0, m2 = 0, m5 = ROOT_INO, is-open(m5, of), m5 ∈ dirs, ino1 ∈ dirs, ino1 ∈ dirs1 |
# links(m5, dirs0) = 0, # entries0 = m + 1, (entries0[str] ∈ dirs ⊃ mkinode(entries0[str], dirs[entries0[str]].meta, true, dirs[entries0[str]].nlink, dirs[entries0[str]].nsubdirs, dirs[entries0[str]].size) ;mkinode(entries0[str], files[entries0[str]].meta, false, files[entries0[str]].nlink, 0, files[entries0[str]].size) ) = mkinode(m5, md3, false, 0, 0, m8), dirs1[entries0[str]] = mkdir(m0, md0, m1, m4, entries), dirs0[entries0[str]] = mkdir(0, md, # links(entries0[str], dirs0), m3, ∅), dirs0[ino1] = mkdir(m + 1, md2, # links(ino1, dirs0), m2, entries0), root[q + str '] = dnode(md1, ∅), files[m5] = mkfile(m6, md4, 0, content), # links(ino1, dirs0) ≠ 0, entries0 ≠ ∅, ino1 ≠ ROOT_INO, links(ino1, dirs0) ≠ ∅, m1 ≠ 0, m2 ≠ 0, m5 ≠ ROOT_INO, root.dir?, root[q].dir?, dom of < ino0, abs(root, ROOT_INO)(dirs0), afs-cons(dirs, files -- m5), afs-cons(dirs0, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs0, files), of-cons(of, dirs0, files), of-cons(of, dirs, files -- m5), pw(user, md2), px(user, md2), px-parent(user, q, ROOT_INO, dirs0, files), str ∈ entries0, ino1 ∈ dirs0, entries0[str] ∈ dirs0, entries0[str] ∈ dirs1, m5 ∈ files, dirs1 ≡ dirs0[ino1, mkdir(m, md2, # links(ino1, dirs0), m2 - 1, entries0 -- str)], dirs ≡ dirs1[entries0[str], mkdir(m0, md, m1 - 1, m4, entries)], 1 ≤ m1, 1 ≤ m2, ¬ is-open(m5, of), ¬ m5 ∈ dirs1, ¬ m5 ∈ dirs0, ¬ ino1 ∈ dirs, ¬ ino1 ∈ dirs1, ¬ m5 ∈ dirs, psynced → asynced0 ⊦ ⟨posix_rmdir#(q + str ', user, abs-files(files), abs-of(of); err1, root; psynced)⟩ (abs-files(files) = abs-files(files -- entries0[str]) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ ESUCCESS = err1)
Used simplifier rules: ⊦ mkfile(m, md, m0, content).nlink = m0; (s)%assign-new-other: ⊦ dirs ≡ dirs0[ino, ad] ∧ ¬ ino0 ∈ dirs0 ∧ ino ∈ dirs0 → ¬ ino0 ∈ dirs; (forward) from specification separation[dir-heap]% ⊦ afs-cons(dirs, files) ∧ ino ∈ dirs → ¬ ino ∈ files; (s)%⊦ afs-cons(dirs, files) → ( links(ino, dirs) = ∅ ↔ (ino ∈ dirs → dirs[ino].nlink = 0) ∧ (ino ∈ files → files[ino].nlink = 0)); (ws)%size-zero-02: ⊦ # ls = 0 → ls = ∅; (forward) from specification set-basic[alink-set]%afs-cons-file-nlink: ⊦ afs-cons(dirs, files) ∧ ino ∈ files ∧ files[ino] = mkfile(m, md, n, content) → # links(ino, dirs) = n; (forward) from specification afs-base