| isdir1 ↔ true, isdir2 ↔ true, entries[str] ∈ dirs ↔ root[q + str '].dir?, isdir ↔ p_inode.directory, isdir0 ↔ isdir, dirs[ino1] = mkdir(# entries, md, # links(ino1, dirs), m1, entries), err = ENOTDIR, err1 = err, err2 = ESUCCESS, err3 = ESUCCESS, fs = abs-files(files), ino = mkdentry(str, entries[str]).ino, inode = p_inode0, ¬ isdir, ¬ isdir0, isdir1, p_inode = getinode(ino, dirs, files), mkdentry(str, entries[str]).dentry?, root.dir?, root[q].dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pre-iget(ino, dirs, files), pw(user, md), px(user, md), px-parent(user, q, ROOT_INO, dirs, files), str ∈ entries, ino1 ∈ dirs, psynced → asynced, links(ino1, dirs) ≠ ∅ ∨ ino1 = ROOT_INO ⊦ ⟨posix_rmdir#(q + str ', user, fs, abs-of(of); err0, root; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err1 = err0) |
dirs[ino1] = mkdir(# entries, md, # links(ino1, dirs), m1, entries), root.dir?, root[q].dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pw(user, md), px(user, md), px-parent(user, q, ROOT_INO, dirs, files), str ∈ entries, ino1 ∈ dirs, entries[str] ∈ files, ¬ root[q + str '].dir?, ¬ entries[str] ∈ dirs, psynced → asynced, links(ino1, dirs) ≠ ∅ ∨ ino1 = ROOT_INO ⊦ ⟨posix_rmdir#(q + str ', user, abs-files(files), abs-of(of); err0, root; psynced)⟩ (abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ ENOTDIR = err0)
Used simplifier rules: ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ mkdentry(str, m).dentry?; (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)% ⊦ pre-iget(ino, dirs, files) ↔ valid-ino(ino, dirs, files); (s)%⊦ getinode(ino, dirs, files) = (ino ∈ dirs ⊃ mkinode (ino, dirs[ino].meta, true, dirs[ino].nlink, dirs[ino].nsubdirs, dirs[ino].size) ;mkinode (ino, files[ino].meta, false, files[ino].nlink, 0, files[ino].size) ); (s)% ⊦ mkdentry(str, m).ino = m; (s)