[Imprint][Data Privacy Statement][E-Mail]

View long theorem info. View the proof. Back to main index. View the specification. View theorem base summary, View theorem base listing, the used properties by spec, the dependency list, the symbol table,

Proof step 467 from proof inv-write (previous step)

VFS_PAGE_SIZE = n1 + (m0 + ino0) % VFS_PAGE_SIZE, files[m] = mkfile(m2, md0, m3, content), files0[m] = mkfile(m1, md, # links(m, dirs), content0), of[fd] = mkfile(m, mode, m0), dom of < ino3, afs-cons(dirs, files), afs-cons(dirs, files0), of-cons (of, dirs, files[m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))])]), of-cons(of, dirs, files0), of-cons(of, dirs, files), fd ∈ of, m ∈ files0, ino0 + min(n2, n1) ≤ # buf0, (m0 + ino0) % VFS_PAGE_SIZE + min(n2, n1) ≤ VFS_PAGE_SIZE, n2 + ino0 ≤ # buf0, ino0 ≤ # buf0 ⊦ n2 + ino0 = 0, min(n2, n1) = 0, (m0 + ino0) / VFS_PAGE_SIZE ∈ content, ∀ ino, name, n. ROOT_INO ∈ dirs ∧ (ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → dir-empty(ino, dirs, files0)) ∧ ( ino ∈ dirs → ¬ ino ∈ files0 ∧ dirs[ino].nlink = # links(ino, dirs) ∧ dirs[ino].nlink ≤ 1 ∧ dirs[ino].size = # dirs[ino].entries ∧ dirs[ino].nsubdirs = # subdirs(ino, dirs)) ∧ (ino ∈ files0 → ¬ ino ∈ dirs ∧ files0[ino].nlink = # links(ino, dirs)) ∧ (ino ∈ dirs ∧ name ∈ dirs[ino].entries → valid-ino(dirs[ino].entries[name], dirs, files0)) ∧ (ino ∈ files0 ∧ n ∈ files0[ino].content → valid-pagesize(ino, n, files0)) → ROOT_INO ∈ dirs ∧ ( ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → dir-empty (ino, dirs, files[m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))])])) ∧ ( ino ∈ dirs → ¬ ino ∈ files [m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ] ∧ dirs[ino].nlink = # links(ino, dirs) ∧ dirs[ino].nlink ≤ 1 ∧ dirs[ino].size = # dirs[ino].entries ∧ dirs[ino].nsubdirs = # subdirs(ino, dirs)) ∧ ( ino ∈ files[m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))])] → ¬ ino ∈ dirs ∧ files [m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ] [ino ] .nlink = # links(ino, dirs)) ∧ ( ino ∈ dirs ∧ name ∈ dirs[ino].entries → valid-ino (dirs[ino].entries[name], dirs, files[m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))])])) ∧ ( ino ∈ files [m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ] ∧ n ∈ files [m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ] [ino ] .content → valid-pagesize (ino, n, files[m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))])])), mode ≠ MODE_W ∧ mode ≠ MODE_RW, m1 % VFS_PAGE_SIZE ≠ 0 ∧ m1 / VFS_PAGE_SIZE ∈ content0

Heuristic simplifier applied rule simplifier

And obtained the following new goals

Proof step 468:
VFS_PAGE_SIZE = n1 + (m0 + ino0) % VFS_PAGE_SIZE, of[fd] = mkfile(m, mode, m0), files0[m] = mkfile(m1, md, # links(m, dirs), content0), files[m] = mkfile(m2, md0, m3, content), dom of < ino3, afs-cons(dirs, files0), afs-cons(dirs, files), of-cons(of, dirs, files), of-cons(of, dirs, files0), of-cons (of, dirs, files[m, mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))])]), ROOT_INO ∈ dirs, m ∈ files0, fd ∈ of, ino0 ≤ # buf0, n2 + ino0 ≤ # buf0, (m0 + ino0) % VFS_PAGE_SIZE + min(n2, n1) ≤ VFS_PAGE_SIZE, ino0 + min(n2, n1) ≤ # buf0, ino ∈ files0 → ¬ ino ∈ dirs ∧ files0[ino].nlink = # links(ino, dirs), ino ∈ dirs ∧ ino ≠ ROOT_INO ∧ links(ino, dirs) = ∅ → dirs[ino].entries = ∅, ino ∈ dirs → dirs[ino].nlink = # links(ino, dirs) ∧ dirs[ino].nlink ≤ 1 ∧ dirs[ino].size = # dirs[ino].entries ∧ dirs[ino].nsubdirs = # subdirs(ino, dirs), ino ∈ dirs ∧ name ∈ dirs[ino].entries → dirs[ino].entries[name] ∈ dirs ∨ dirs[ino].entries[name] ∈ files0, ino ∈ files0 ∧ n ∈ files0[ino].content → # files0[ino].content[n] = VFS_PAGE_SIZE ⊦ n2 + ino0 = 0, min(n2, n1) = 0, (m0 + ino0) / VFS_PAGE_SIZE ∈ content, m1 % VFS_PAGE_SIZE ≠ 0 ∧ m1 / VFS_PAGE_SIZE ∈ content0, mode ≠ MODE_W ∧ mode ≠ MODE_RW, ( ino ∈ files → ¬ ino ∈ dirs ∧ (ino = m ⊃ mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ;files[ino] ) .nlink = # links(ino, dirs)) ∧ (ino ∈ dirs ∧ name ∈ dirs[ino].entries → dirs[ino].entries[name] ∈ dirs ∨ dirs[ino].entries[name] ∈ files) ∧ ( ino ∈ files ∧ n ∈ (ino = m ⊃ mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ;files[ino] ) .content → # (ino = m ⊃ mkfile(m2, md0, m3, content[(m0 + ino0) / VFS_PAGE_SIZE, copy(buf0, ino0, zeropage, (m0 + ino0) % VFS_PAGE_SIZE, min(n2, n1))]) ;files[ino] ) .content [n ] = VFS_PAGE_SIZE)

Rule argument

Additional information

Used simplifier rules: ⊦ of-cons(of, dirs, files) ∧ fd ∈ of ∧ of[fd] = mkfile(ino, mode, n) → ino ∈ files; (ss)% ⊦ files[ino, af][ino0] = (ino0 = ino ∧ ino ∈ files ⊃ af;files[ino0]); (s)% ⊦ ino ∈ files[ino0, af] ↔ ino ∈ files; (s)% ⊦ afs-cons(dirs, files) → ROOT_INO ∈ dirs; (ss)%⊦ valid-pagesize(ino, n, files) ↔ # files[ino].content[n] = VFS_PAGE_SIZE; (s)% ⊦ valid-ino(ino, dirs, files) ↔ ino ∈ dirs ∨ ino ∈ files; (s)% ⊦ afs-cons(dirs, files) ∧ ino ∈ dirs → ¬ ino ∈ files; (s)% ⊦ dir-empty(ino, dirs, files) ↔ dirs[ino].entries = ∅; (s)