| dirs1 = dirs, err = ESUCCESS, n = 0, dom of < ino, afs-cons(dirs, files), of-cons(of, dirs, files), fd ∈ of, n ≤ # buf, of[fd].mode ≠ MODE_W → fd ∈ of ⊦ [skip] (dirs1 = dirs → of-cons(of, dirs, files) ∧ dom of < ino ∧ afs-cons(dirs, files)), of[fd].mode ≠ MODE_W ∧ of[fd].mode ≠ MODE_RW |
Used simplifier rules: ⊦ 0 ≤ m; (s)% ⊦ ¬ fd ∈ of → of[fd] = (∅)[fd]; (s)