[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 142 from proof inv-write (previous step)

m1 + n1 = m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE + VFS_PAGE_SIZE, VFS_PAGE_SIZE = n3 + (m0 + ino0) % VFS_PAGE_SIZE, files1[ino] = mkfile(m3, md1, m4, content1), files[m] = mkfile(m2, md0, # links(m, dirs), content), of[fd] = mkfile(m, mode, m0), files1[m] = mkfile(m1, md, # links(m, dirs), content0), m1 = n2 + m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, dom of < ino3, afs-cons(dirs, files1), afs-cons(dirs, files), of-cons(of, dirs, files), of-cons(of, dirs, files1), of-cons (of, dirs, files [m, mkfile (m2, md0, # links(m, dirs), content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3))]) ]), ROOT_INO ∈ dirs, m ∈ files1, m1 / VFS_PAGE_SIZE ∈ content0, fd ∈ of, (m0 + ino0) / VFS_PAGE_SIZE ∈ content, m ∈ files, ino0 ≤ # buf0, n0 ≤ # buf0, n2 + n1 ≤ VFS_PAGE_SIZE, ino0 ≤ n0, ino0 + min(n0 - ino0, n3) ≤ # buf0, (m0 + ino0) % VFS_PAGE_SIZE + min(n0 - ino0, n3) ≤ VFS_PAGE_SIZE, ino ∈ files1 → ¬ ino ∈ dirs ∧ m4 = # links(ino, dirs), ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → dirs[ino].entries = ∅, ino ∈ dirs → dirs[ino].nlink = # links(ino, dirs) ∧ dirs[ino].nlink ≤ 1 ∧ dirs[ino].size = # dirs[ino].entries ∧ dirs[ino].nsubdirs = # subdirs(ino, dirs), ino ∈ dirs ∧ name ∈ dirs[ino].entries → dirs[ino].entries[name] ∈ dirs ∨ dirs[ino].entries[name] ∈ files1 ⊦ min(n0 - ino0, n3) = 0, n0 = 0, n2 = 0, mode ≠ MODE_W ∧ mode ≠ MODE_RW, ( ino ∈ files → ¬ ino ∈ dirs ∧ (ino = m ⊃ mkfile (m2, md0, # links(m, dirs), content [(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3)) ]) ;files[ino] ) .nlink = # links(ino, dirs)) ∧ (ino ∈ dirs ∧ name ∈ dirs[ino].entries → dirs[ino].entries[name] ∈ dirs ∨ dirs[ino].entries[name] ∈ files) ∧ ( ino ∈ files ∧ n ∈ (ino = m ⊃ mkfile (m2, md0, # links(m, dirs), content [(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3)) ]) ;files[ino] ) .content → # (ino = m ⊃ mkfile (m2, md0, # links(m, dirs), content [(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3)) ]) ;files[ino] ) .content [n ] = VFS_PAGE_SIZE)

Heuristic elimination applied rule insert elim lemma

And obtained the following new goals

Proof step 143:
m1 + n1 = m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE + VFS_PAGE_SIZE, (ino = m ⊃ mkfile (m2, md0, # links(m, dirs), content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3))]) ;files[ino] ) = mkfile(m5, md2, m6, content2), VFS_PAGE_SIZE = n3 + (m0 + ino0) % VFS_PAGE_SIZE, files1[m] = mkfile(m1, md, # links(m, dirs), content0), of[fd] = mkfile(m, mode, m0), files[m] = mkfile(m2, md0, # links(m, dirs), content), files1[ino] = mkfile(m3, md1, m4, content1), m1 = n2 + m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, dom of < ino3, afs-cons(dirs, files), afs-cons(dirs, files1), of-cons (of, dirs, files [m, mkfile (m2, md0, # links(m, dirs), content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3))]) ]), of-cons(of, dirs, files1), of-cons(of, dirs, files), m ∈ files, (m0 + ino0) / VFS_PAGE_SIZE ∈ content, fd ∈ of, m1 / VFS_PAGE_SIZE ∈ content0, m ∈ files1, ROOT_INO ∈ dirs, (m0 + ino0) % VFS_PAGE_SIZE + min(n0 - ino0, n3) ≤ VFS_PAGE_SIZE, ino0 + min(n0 - ino0, n3) ≤ # buf0, ino0 ≤ n0, n2 + n1 ≤ VFS_PAGE_SIZE, n0 ≤ # buf0, ino0 ≤ # buf0, ino ∈ dirs ∧ name ∈ dirs[ino].entries → dirs[ino].entries[name] ∈ dirs ∨ dirs[ino].entries[name] ∈ files1, ino ∈ dirs → dirs[ino].nlink = # links(ino, dirs) ∧ dirs[ino].nlink ≤ 1 ∧ dirs[ino].size = # dirs[ino].entries ∧ dirs[ino].nsubdirs = # subdirs(ino, dirs), ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → dirs[ino].entries = ∅, ino ∈ files1 → ¬ ino ∈ dirs ∧ m4 = # links(ino, dirs) ⊦ min(n0 - ino0, n3) = 0, n0 = 0, n2 = 0, (ino ∈ files → ¬ ino ∈ dirs ∧ m6 = # links(ino, dirs)) ∧ (ino ∈ dirs ∧ name ∈ dirs[ino].entries → dirs[ino].entries[name] ∈ dirs ∨ dirs[ino].entries[name] ∈ files) ∧ (ino ∈ files ∧ n ∈ content2 → # content2[n] = VFS_PAGE_SIZE), mode ≠ MODE_W ∧ mode ≠ MODE_RW

Rule argument

spec: abstract-file name: elim seq: ⊦ ((m = af.size ∧ md = af.meta) ∧ m0 = af.nlink) ∧ content = af.content ↔ af = mkfile(m, md, m0, content) subst: [af, m, md, m0, content] → [(ino = m ⊃ mkfile (m2, md0, # links(m, dirs), content [(m0 + ino0) / VFS_PAGE_SIZE, copy (buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3)) ]) ;files[ino] ), m5, md2, m6, content2]

Additional information

Used simplifier rules: ⊦ ((m = af.size ∧ md = af.meta) ∧ m0 = af.nlink) ∧ content = af.content ↔ af = mkfile(m, md, m0, content); (elim) Used terms: (ino = m ⊃ mkfile (m2, md0, # links(m, dirs), content [(m0 + ino0) / VFS_PAGE_SIZE, copy (buf0, ino0, content[(m0 + ino0) / VFS_PAGE_SIZE], (m0 + ino0) % VFS_PAGE_SIZE, min(n0 - ino0, n3)) ]) ;files[ino] ), m5, md2, m6, content2