| files1[ino].meta = md, files = files1, inode = mkinode(ino, files1[ino].meta, false, m, n0, m0 + n), pre-write-inode(inode, dirs, files), write-inv(n0, n1, mkinode(ino, files1[ino].meta, false, m, n0, m0), buf, n, dirs, files0, files1), ino ∈ files1 ⊦ [fail#(; ; err); asynced := ?; if err = ESUCCESS then files0[ino].size := m0 + n] write-inv(n0, n1, mkinode(ino, md, false, m, n0, files0[ino].size), buf, n, dirs, files0, files) |
write-inv(0, n1, mkinode(ino, files1[ino].meta, false, files1[ino].nlink, 0, m0), buf, n, dirs, files0, files1), ino ∈ files1 ⊦ [fail#(; ; err); asynced := ?; if err = ESUCCESS then files0[ino].size := m0 + n] write-inv(0, n1, mkinode(ino, files1[ino].meta, false, files1[ino].nlink, 0, files0[ino].size), buf, n, dirs, files0, files1)
Used simplifier rules: ⊦ valid-file-ino(ino, dirs, files) ↔ ino ∈ files; (s)%⊦ valid-file-inode(inode, dirs, files) ↔ valid-file-ino(inode.ino, dirs, files) ∧ inode.nlink = files[inode.ino].nlink ∧ inode.nsubdirs = 0 ∧ ¬ inode.directory; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).directory ↔ boolvar; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nsubdirs = m1; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).size = m2; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).nlink = m0; (s)% ⊦ valid-dir-ino(ino, dirs, files) ↔ ino ∈ dirs; (s)% ⊦ mkinode(m, md, boolvar, m0, m1, m2).ino = m; (s)%⊦ valid-dir-inode(inode, dirs, files) ↔ valid-dir-ino(inode.ino, dirs, files) ∧ inode.nlink = dirs[inode.ino].nlink ∧ inode.size = dirs[inode.ino].size ∧ inode.nsubdirs = dirs[inode.ino].nsubdirs ∧ inode.directory; (s)%⊦ valid-wb-inode(inode, dirs, files) ↔ valid-dir-inode(inode, dirs, files) ∨ valid-file-inode(inode, dirs, files); (s)%⊦ pre-write-inode(inode, dirs, files) ↔ valid-wb-inode(inode, dirs, files); (s)