[Imprint]
[Data Privacy Statement]
[E-Mail]
View
long theorem info
. View
the proof
. Back to
main index
. View
the specification
. View
theorem base summary
, View
theorem base listing
, the
used properties by spec
, the
dependency list
, the
symbol table
,
Theorem inv-open
of-cons(of, dirs, files), dom of < ino, afs-cons(dirs, files) ⊦ ⟪vfs_open#(p, mode, user, dirs, files, asynced; fd, err, of, ino)⟫ (of-cons(of, dirs, files) ∧ dom of < ino)
Type: A proof obligation
Validity: The proof is valid.
Features:
Comment:
Used by:
Used by units in proved state:
Proof exists?: Yes
View
the proof
Infos about the proof
Proved?: Yes
Interactions: 3
Proof steps: 51
Used lemmas:
of-cons-reduce
,
may-open
,
walk-prepost
,
open
,
Used spec theorems:
Used simplifier rules:
error
/
disj-33
error-class
/
esuccess
error
/
disj-32
error
/
disj-29
inode
/
sel-02
inode
/
sel-03
afs-base
/
afs-cons-notfile
file
/
sel
store
/open-files/
k-At-same
store
/open-files/
In-insert
nat-basic
/
c
nat-basic
/
a
nat-set
/
ls-add-bound
nat-set
/
ls-add-1
store+set
/open-files/
dom-ins
afs-base
/
getinode
abstract-file
/
elim
afs-base
/
afs-cons-file-nlink
file
/
elim
store
/open-files/
At-other
store
/open-files/
in-neq
vfs-base
/
of-cons-file
store
/open-files/
At-same
file
/
inj
error-class
/
not-esuccess
error-class
/
ecommit
afs-base
/
path-in-end
afs-base
/
valid-ino
afs-pre
/
pre-iget