| ⟨if ¬ is-open(entries0[str], of) ∧ ¬ ⌜entries0[str]⌝ ∈ (root0 -- (q + str ')).fids then fs := fs -- ⌜entries0[str]⌝ ⟩ (fs = fs0), ⟨vfs_put_inode#(getinode(entries0[str], dirs1, files), of, asynced; err0, dirs, files)⟩ (err0 = ESUCCESS ∧ dirs = dirs1 ∧ files = files1), # entries0 = m0 + 1, # links(entries0[str], dirs0) = m + 1, files0[entries0[str]] = mkfile(m1, md1, m + 1, content0), dirs0[ino1] = mkdir(m0 + 1, md0, # links(ino1, dirs0), m3, entries0), dirs = dirs1, err0 = ESUCCESS, files = files0[entries0[str], mkfile(m1, md1, m, content0)], fs = abs-files(files0), (root0 -- (q + str ')).dir?, root0.dir?, root0[q].dir?, dom of < ino0, abs(root0, ROOT_INO)(dirs0), afs-cons(dirs1, files1), afs-cons(dirs0, files0), fids-cons(root0 -- (q + str '), fs0, abs-of(of)), fids-cons(root0, abs-files(files0), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs0, files0), of-cons(of, dirs1, files1), of-cons(of, dirs0, files0), pw(user, md0), px(user, md0), px-parent(user, q, ROOT_INO, dirs0, files0), entries0[str] ∈ files0, ino1 ∈ dirs0, str ∈ entries0, dirs1 ≡ dirs0[ino1, mkdir(m0, md0, # links(ino1, dirs0), m3, entries0 -- str)], psynced0 → asynced0, links(ino1, dirs0) ≠ ∅ ∨ ino1 = ROOT_INO ⊦ entries0 = ∅, root0[q + str '].dir?, abs(root0 -- (q + str '), ROOT_INO)(dirs), entries0[str] ∈ dirs0, entries0[str] ∈ dirs1, fs0 = abs-files(files1) ∧ abs(root0 -- (q + str '), ROOT_INO)(dirs1) |
⊦ ispath(p, ROOT_INO, ino, dirs, files) ∧ ino ∈ dirs ∧ dirs[ino] = mkdir(n, md, m0, m1, entries) ∧ fids-cons(tree, abs-files(files), ofh) ∧ afs-cons(dirs, files) ∧ ¬ abs(tree0, ROOT_INO)(dirs0) → ( abs(tree, ROOT_INO)(dirs) ↔ (∃ sdt. ((abs|(tree, ROOT_INO, p, ino) * ino => mkdir(n, md, m0, m1, entries) * abs(sdt, entries)))(dirs) ∧ p ∈ tree ∧ tree[p] = dnode(md, sdt)))
⟨vfs_put_inode#(getinode(entries0[str], dirs1, files), of, asynced; err0, dirs, files)⟩ (err0 = ESUCCESS ∧ dirs = dirs1 ∧ files = files1), ⟨if ¬ is-open(entries0[str], of) ∧ ¬ ⌜entries0[str]⌝ ∈ (root0 -- (q + str ')).fids then fs := fs -- ⌜entries0[str]⌝ ⟩ (fs = fs0), # entries0 = m0 + 1, # links(entries0[str], dirs0) = m + 1, dirs0[ino1] = mkdir(m0 + 1, md0, # links(ino1, dirs0), m3, entries0), root0[q] = dnode(md0, sdt), files0[entries0[str]] = mkfile(m1, md1, m + 1, content0), dirs = dirs1, err0 = ESUCCESS, files = files0[entries0[str], mkfile(m1, md1, m, content0)], fs = abs-files(files0), entries0 ≠ ∅, ((ino1 => mkdir(m0, md0, # links(ino1, dirs0), m3, entries0 -- str) * abs|(root0, ROOT_INO, q, ino1) * abs(sdt, entries0)))(dirs1), (root0 -- (q + str ')).dir?, root0.dir?, dom of < ino0, afs-cons(dirs1, files1), afs-cons(dirs0, files0), fids-cons(root0 -- (q + str '), fs0, abs-of(of)), fids-cons(root0, abs-files(files0), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs0, files0), of-cons(of, dirs1, files1), of-cons(of, dirs0, files0), pw(user, md0), px(user, md0), px-parent(user, q, ROOT_INO, dirs0, files0), str ∈ sdt, ino1 ∈ dirs0, entries0[str] ∈ files0, q ∈ root0, str ∈ entries0, dirs1 ≡ dirs0[ino1, mkdir(m0, md0, # links(ino1, dirs0), m3, entries0 -- str)], ¬ root0[q + str '].dir?, ¬ abs(root0 -- (q + str '), ROOT_INO)(dirs1), ¬ entries0[str] ∈ dirs0, ¬ entries0[str] ∈ dirs1, psynced0 → asynced0, links(ino1, dirs0) ≠ ∅ ∨ ino1 = ROOT_INO ⊦
Used simplifier rules: abs-unfold: ⊦ ispath(p, ROOT_INO, ino, dirs, files) ∧ ino ∈ dirs ∧ dirs[ino] = mkdir(n, md, m0, m1, entries) ∧ fids-cons(tree, abs-files(files), ofh) ∧ afs-cons(dirs, files) ∧ ¬ abs(tree0, ROOT_INO)(dirs0) → ( abs(tree, ROOT_INO)(dirs) ↔ (∃ sdt. (( abs|(tree, ROOT_INO, p, ino) * ino => mkdir(n, md, m0, m1, entries) * abs(sdt, entries)) )(dirs) ∧ p ∈ tree ∧ tree[p] = dnode(md, sdt)));%entries-dom2: ⊦ str ∈ sdt ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdi; (forward) from specification vfs-abs% ⊦ dnode(md, sdt).dir?; (s)%entries-dom1: ⊦ str ∈ sdi ∧ ((abs(sdt, sdi) * D))(dirs) → str ∈ sdt; (forward) from specification vfs-abs%⊦ dirs ≡ dirs0[ino, ad] → ( ((ino => ad0 * D))(dirs0) ↔ ((ino => ad * D))(dirs) ∧ dirs0[ino] = ad0 ∧ ino ∈ dirs0); (ws)% ⊦ ((ino => ad * D))(dirs) → ino ∈ dirs; (s)% ⊦ ((ino => ad * D))(dirs) → (dirs[ino] = ad0 ↔ ad = ad0); (s)%sep-com: ⊦ D * D0 = D0 * D; from specification heap-sep[dir-heap]%sep-ass: ⊦ (D * D0) * D1 = D * D0 * D1; from specification heap-sep[dir-heap]