| (ino1 ∈ dirs ⊃ mkinode(ino1, dirs[ino1].meta, true, dirs[ino1].nlink, dirs[ino1].nsubdirs, dirs[ino1].size) ;mkinode(ino1, files[ino1].meta, false, files[ino1].nlink, 0, files[ino1].size) ) = mkinode(m, md0, boolvar, m0, m1, m2), root[path].dir? ↔ ino1 ∈ dirs, err0 = ESUCCESS, fs = abs-files(files), root.dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(path, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pw(user, md0), px-parent(user, path, ROOT_INO, dirs, files), psynced → asynced0, ino1 ∈ dirs ∨ ino1 ∈ files ⊦ ⟪afs_write_inode#(mkinode(m, md, boolvar, m0, m1, m2); err0, dirs, files; asynced)⟫ ⟨posix_writemeta#(path, md, user, abs-of(of); err1, root, fs; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err0 = err1) |
(ino1 ∈ dirs ⊃ mkinode(ino1, dirs[ino1].meta, true, dirs[ino1].nlink, dirs[ino1].nsubdirs, dirs[ino1].size) ;mkinode(ino1, files[ino1].meta, false, files[ino1].nlink, 0, files[ino1].size) ) = mkinode(m, md0, boolvar, m0, m1, m2), root[path].dir? ↔ ino1 ∈ dirs, err = err0, err0 = ESUCCESS, fs = abs-files(files), inode = mkinode(m, md, boolvar, m0, m1, m2), root.dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(path, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pw(user, md0), px-parent(user, path, ROOT_INO, dirs, files), psynced → asynced0, ino1 ∈ dirs ∨ ino1 ∈ files ⊦ ⟪if pre-write-inode(inode, dirs, files) then { {if inode.directory then dirs[inode.ino].meta := inode.meta else {files[inode.ino].meta := inode.meta; files[inode.ino].size := inode.size}; err := ESUCCESS} or fail#(; ; err); asynced := ?} else abort⟫ ⟨posix_writemeta#(path, md, user, abs-of(of); err1, root, fs; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err = err1)
Used simplifier rules: afs_write_inode#(INODE; ERR, DIRS, FILES; ASYNCED) {if pre-write-inode(INODE, DIRS, FILES) then { {if INODE.directory then DIRS[INODE.ino].meta := INODE.meta else {FILES[INODE.ino].meta := INODE.meta; FILES[INODE.ino].size := INODE.size}; ERR := ESUCCESS} or fail#(; ; ERR); ASYNCED := ?} else abort };