| ino ∈ files1, ∀ ino, n. (ino ∈ files0 ∧ n ∈ files0[ino].content → n * VFS_PAGE_SIZE < files0[ino].size) → ino ∈ files1 ∧ n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size, ∀ ino. ino ∈ files0 → valid-content(ino, files0) ⊦ valid-content(ino, files1) |
⊦ valid-content(ino, files) ↔ (∀ n. n ∈ files[ino].content → n * VFS_PAGE_SIZE < files[ino].size)
ino ∈ files1, ∀ ino. ino ∈ files0 → valid-content(ino, files0), ∀ ino, n. (ino ∈ files0 ∧ n ∈ files0[ino].content → n * VFS_PAGE_SIZE < files0[ino].size) → ino ∈ files1 ∧ n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size ⊦ ∀ n. n ∈ files1[ino].content → n * VFS_PAGE_SIZE < files1[ino].size
Used terms: files1, ino