[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 223 from proof inv-write (previous step)

m1 + n1 = m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE + VFS_PAGE_SIZE, of[fd] = mkfile(m, mode, m0), files1[m] = mkfile(m1, md, # links(m, dirs), content0), err = ESUCCESS, m1 = n2 + m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, ino4 ≠ 0, n ≠ 0, n2 ≠ 0, m1 < m0 + ino4, dom of < ino3, afs-cons(dirs, files), afs-cons(dirs, files1), of-cons(of, dirs, files), of-cons(of, dirs, files1), m ∈ files1, m1 / VFS_PAGE_SIZE ∈ content0, fd ∈ of, m1 % VFS_PAGE_SIZE + n1 ≤ VFS_PAGE_SIZE, n ≤ # buf0, n2 + n1 ≤ VFS_PAGE_SIZE ⊦ [afs_check_commit#(dirs, files; err; asynced); ino0 := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .size) ) .size; dirs1 := dirs; if err = ESUCCESS then afs_write_inode# ( (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .size) ) .size:= (m0 + ino4) ; err, dirs, files ; asynced); if err ≠ ESUCCESS then ino4 := (m0 ≤ ino0 ⊃ ino0 - m0;0), err := ESUCCESS; of[fd].pos := m0 + ino4] (dirs1 = dirs → of-cons(of, dirs, files) ∧ dom of < ino3 ∧ afs-cons(dirs, files)), err1 = ESUCCESS ∧ ¬ isdir, mode ≠ MODE_W ∧ mode ≠ MODE_RW

Heuristic elimination applied rule insert elim lemma

And obtained the following new goals

Proof step 224:
m1 + n1 = m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE + VFS_PAGE_SIZE, (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .size) ) = mkinode(m2, md0, boolvar, m3, m4, m5), files1[m] = mkfile(m1, md, # links(m, dirs), content0), of[fd] = mkfile(m, mode, m0), err = ESUCCESS, m1 = n2 + m1 / VFS_PAGE_SIZE * VFS_PAGE_SIZE, dom of < ino3, m1 < m0 + ino4, afs-cons(dirs, files1), afs-cons(dirs, files), of-cons(of, dirs, files1), of-cons(of, dirs, files), fd ∈ of, m1 / VFS_PAGE_SIZE ∈ content0, m ∈ files1, n2 + n1 ≤ VFS_PAGE_SIZE, n ≤ # buf0, m1 % VFS_PAGE_SIZE + n1 ≤ VFS_PAGE_SIZE ⊦ [afs_check_commit#(dirs, files; err; asynced); ino0 := m5; dirs1 := dirs; if err = ESUCCESS then afs_write_inode# ( (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0[m1 / VFS_PAGE_SIZE, fill(content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1)] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .size) ) .size:= (m0 + ino4) ; err, dirs, files ; asynced); if err ≠ ESUCCESS then ino4 := (m0 ≤ ino0 ⊃ ino0 - m0;0), err := ESUCCESS; of[fd].pos := m0 + ino4] (dirs1 = dirs → of-cons(of, dirs, files) ∧ dom of < ino3 ∧ afs-cons(dirs, files)), ino4 = 0, n = 0, n2 = 0, mode ≠ MODE_W ∧ mode ≠ MODE_RW, err1 = ESUCCESS ∧ ¬ isdir

Rule argument

spec: inode name: elim seq: ⊦ ( ( ( (m = inode.ino ∧ md = inode.meta) ∧ (boolvar ↔ inode.directory)) ∧ m0 = inode.nlink) ∧ m1 = inode.nsubdirs) ∧ m2 = inode.size ↔ inode = mkinode(m, md, boolvar, m0, m1, m2) subst: [inode, m, md, boolvar, m0, m1, m2] → [(m ∈ dirs ⊃ mkinode (m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0 [m1 / VFS_PAGE_SIZE, fill (content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1) ] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0 [m1 / VFS_PAGE_SIZE, fill (content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1) ] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0 [m1 / VFS_PAGE_SIZE, fill (content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1) ] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .size) ), m2, md0, boolvar, m3, m4, m5]

Additional information

Used simplifier rules: ⊦ ( ( ( (m = inode.ino ∧ md = inode.meta) ∧ (boolvar ↔ inode.directory)) ∧ m0 = inode.nlink) ∧ m1 = inode.nsubdirs) ∧ m2 = inode.size ↔ inode = mkinode(m, md, boolvar, m0, m1, m2); (elim) Used terms: (m ∈ dirs ⊃ mkinode (m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode (m, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0 [m1 / VFS_PAGE_SIZE, fill (content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1) ] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .meta, false, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0 [m1 / VFS_PAGE_SIZE, fill (content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1) ] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .nlink, 0, files1 [m, files1 [m, files1 [m, mkfile (m1, md, # links(m, dirs), content0 [m1 / VFS_PAGE_SIZE, fill (content0[m1 / VFS_PAGE_SIZE], zero, m1 % VFS_PAGE_SIZE, n1) ] upto m1) ] [m ] .size:= m1 ] [m ] .meta:= md ] [m ] .size) ), m2, md0, boolvar, m3, m4, m5