java -Xmx6000000000 -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data ./data --generate-csv --csv-dir ../../../releaseScripts/default/UAutomizer-linux/csv --cacsl2boogietranslator.bitprecise.bitfields false -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/cade18-smtinterpol/svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf -i ../../../trunk/examples/svcomp/ldv-memsafety/ArraysOfVariableLength5_true-valid-memsafety.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-408c70d-m [2018-04-13 00:07:22,070 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-04-13 00:07:22,071 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-04-13 00:07:22,084 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-04-13 00:07:22,084 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-04-13 00:07:22,085 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-04-13 00:07:22,086 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-04-13 00:07:22,088 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-04-13 00:07:22,089 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-04-13 00:07:22,090 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-04-13 00:07:22,091 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-04-13 00:07:22,091 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-04-13 00:07:22,091 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-04-13 00:07:22,092 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-04-13 00:07:22,093 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-04-13 00:07:22,094 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-04-13 00:07:22,096 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-04-13 00:07:22,097 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-04-13 00:07:22,098 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-04-13 00:07:22,099 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-04-13 00:07:22,100 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-04-13 00:07:22,101 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-04-13 00:07:22,101 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-04-13 00:07:22,102 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-04-13 00:07:22,102 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-04-13 00:07:22,103 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-04-13 00:07:22,103 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-04-13 00:07:22,104 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-04-13 00:07:22,104 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-04-13 00:07:22,104 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-04-13 00:07:22,105 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-04-13 00:07:22,105 INFO L98 SettingsManager]: Beginning loading settings from /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/cade18-smtinterpol/svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf [2018-04-13 00:07:22,150 INFO L110 SettingsManager]: Loading preferences was successful [2018-04-13 00:07:22,150 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-04-13 00:07:22,151 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-04-13 00:07:22,152 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-04-13 00:07:22,152 INFO L133 SettingsManager]: * Use SBE=true [2018-04-13 00:07:22,152 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-04-13 00:07:22,152 INFO L133 SettingsManager]: * sizeof long=4 [2018-04-13 00:07:22,152 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * Bitprecise bitfields=true [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-04-13 00:07:22,153 INFO L133 SettingsManager]: * sizeof long double=12 [2018-04-13 00:07:22,154 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-04-13 00:07:22,154 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-04-13 00:07:22,154 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-04-13 00:07:22,154 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-04-13 00:07:22,154 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-04-13 00:07:22,154 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-04-13 00:07:22,155 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_TreeInterpolation Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Bitprecise bitfields -> false [2018-04-13 00:07:22,185 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-04-13 00:07:22,194 INFO L266 ainManager$Toolchain]: [Toolchain 1]: Parser(s) successfully (re)initialized [2018-04-13 00:07:22,198 INFO L222 ainManager$Toolchain]: [Toolchain 1]: Toolchain data selected. [2018-04-13 00:07:22,199 INFO L271 PluginConnector]: Initializing CDTParser... [2018-04-13 00:07:22,200 INFO L276 PluginConnector]: CDTParser initialized [2018-04-13 00:07:22,200 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-memsafety/ArraysOfVariableLength5_true-valid-memsafety.c [2018-04-13 00:07:22,560 INFO L225 CDTParser]: Created temporary CDT project at /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/data/FLAG2444605e3 [2018-04-13 00:07:22,672 INFO L287 CDTParser]: IsIndexed: true [2018-04-13 00:07:22,672 INFO L288 CDTParser]: Found 1 translation units. [2018-04-13 00:07:22,672 INFO L168 CDTParser]: Scanning ArraysOfVariableLength5_true-valid-memsafety.c [2018-04-13 00:07:22,673 INFO L210 ultiparseSymbolTable]: Include resolver: [2018-04-13 00:07:22,673 INFO L215 ultiparseSymbolTable]: [2018-04-13 00:07:22,673 INFO L218 ultiparseSymbolTable]: Function table: [2018-04-13 00:07:22,673 INFO L221 ultiparseSymbolTable]: Function definition of __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo ('foo') in ArraysOfVariableLength5_true-valid-memsafety.c [2018-04-13 00:07:22,673 INFO L221 ultiparseSymbolTable]: Function definition of null ('main') in ArraysOfVariableLength5_true-valid-memsafety.c [2018-04-13 00:07:22,674 INFO L227 ultiparseSymbolTable]: Global variable table: [2018-04-13 00:07:22,674 INFO L233 ultiparseSymbolTable]: [2018-04-13 00:07:22,686 INFO L330 CDTParser]: Deleted temporary CDT project at /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/data/FLAG2444605e3 [2018-04-13 00:07:22,689 INFO L304 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-04-13 00:07:22,690 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-04-13 00:07:22,691 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-04-13 00:07:22,691 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-04-13 00:07:22,694 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-04-13 00:07:22,695 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,697 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@c5d523c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22, skipping insertion in model container [2018-04-13 00:07:22,697 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,707 INFO L167 Dispatcher]: Using SV-COMP mode [2018-04-13 00:07:22,716 INFO L167 Dispatcher]: Using SV-COMP mode [2018-04-13 00:07:22,813 INFO L175 PostProcessor]: Settings: Checked method=main [2018-04-13 00:07:22,834 INFO L175 PostProcessor]: Settings: Checked method=main [2018-04-13 00:07:22,839 INFO L100 SccComputation]: Graph consists of 0 InCaSumBalls and 9 non ball SCCs. Number of states in SCCs 9. [2018-04-13 00:07:22,845 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22 WrapperNode [2018-04-13 00:07:22,845 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-04-13 00:07:22,845 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-04-13 00:07:22,846 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-04-13 00:07:22,846 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-04-13 00:07:22,853 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,853 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,859 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,859 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,862 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,867 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,868 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... [2018-04-13 00:07:22,869 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-04-13 00:07:22,870 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-04-13 00:07:22,870 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-04-13 00:07:22,870 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-04-13 00:07:22,871 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (1/1) ... No working directory specified, using /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-04-13 00:07:22,905 INFO L136 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-04-13 00:07:22,905 INFO L136 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-04-13 00:07:22,905 INFO L136 BoogieDeclarations]: Found implementation of procedure __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo [2018-04-13 00:07:22,905 INFO L136 BoogieDeclarations]: Found implementation of procedure main [2018-04-13 00:07:22,905 INFO L128 BoogieDeclarations]: Found specification of procedure __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo [2018-04-13 00:07:22,905 INFO L128 BoogieDeclarations]: Found specification of procedure read~int [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure main [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-04-13 00:07:22,906 INFO L128 BoogieDeclarations]: Found specification of procedure write~int [2018-04-13 00:07:23,104 INFO L259 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-04-13 00:07:23,105 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.04 12:07:23 BoogieIcfgContainer [2018-04-13 00:07:23,105 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-04-13 00:07:23,105 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-04-13 00:07:23,105 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-04-13 00:07:23,107 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-04-13 00:07:23,107 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.04 12:07:22" (1/3) ... [2018-04-13 00:07:23,108 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19f9c235 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.04 12:07:23, skipping insertion in model container [2018-04-13 00:07:23,108 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.04 12:07:22" (2/3) ... [2018-04-13 00:07:23,108 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@19f9c235 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.04 12:07:23, skipping insertion in model container [2018-04-13 00:07:23,108 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.04 12:07:23" (3/3) ... [2018-04-13 00:07:23,109 INFO L107 eAbstractionObserver]: Analyzing ICFG ArraysOfVariableLength5_true-valid-memsafety.c [2018-04-13 00:07:23,115 INFO L131 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:Craig_TreeInterpolation Determinization: PREDICATE_ABSTRACTION [2018-04-13 00:07:23,119 INFO L143 ceAbstractionStarter]: Appying trace abstraction to program that has 6 error locations. [2018-04-13 00:07:23,152 INFO L128 ementStrategyFactory]: Using default assertion order modulation [2018-04-13 00:07:23,153 INFO L369 AbstractCegarLoop]: Interprodecural is true [2018-04-13 00:07:23,153 INFO L370 AbstractCegarLoop]: Hoare is false [2018-04-13 00:07:23,153 INFO L371 AbstractCegarLoop]: Compute interpolants for Craig_TreeInterpolation [2018-04-13 00:07:23,153 INFO L372 AbstractCegarLoop]: Backedges is CANONICAL [2018-04-13 00:07:23,153 INFO L373 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-04-13 00:07:23,154 INFO L374 AbstractCegarLoop]: Difference is false [2018-04-13 00:07:23,154 INFO L375 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-04-13 00:07:23,154 INFO L380 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-04-13 00:07:23,155 INFO L87 2NestedWordAutomaton]: Mode: main mode - execution starts in main procedure [2018-04-13 00:07:23,166 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states. [2018-04-13 00:07:23,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2018-04-13 00:07:23,173 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:23,174 INFO L355 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:23,174 INFO L408 AbstractCegarLoop]: === Iteration 1 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:23,177 INFO L82 PathProgramCache]: Analyzing trace with hash -215054890, now seen corresponding path program 1 times [2018-04-13 00:07:23,217 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:23,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:23,251 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:23,307 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,309 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-13 00:07:23,310 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2018-04-13 00:07:23,311 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:23,311 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,312 INFO L182 omatonBuilderFactory]: Interpolants [49#true, 50#false, 51#(= main_~i~1 0)] [2018-04-13 00:07:23,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,313 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-04-13 00:07:23,325 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-04-13 00:07:23,326 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-04-13 00:07:23,328 INFO L87 Difference]: Start difference. First operand 46 states. Second operand 3 states. [2018-04-13 00:07:23,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:23,389 INFO L93 Difference]: Finished difference Result 63 states and 68 transitions. [2018-04-13 00:07:23,389 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-04-13 00:07:23,391 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 11 [2018-04-13 00:07:23,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:23,398 INFO L225 Difference]: With dead ends: 63 [2018-04-13 00:07:23,398 INFO L226 Difference]: Without dead ends: 59 [2018-04-13 00:07:23,399 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-04-13 00:07:23,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2018-04-13 00:07:23,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 49. [2018-04-13 00:07:23,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2018-04-13 00:07:23,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 52 transitions. [2018-04-13 00:07:23,429 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 52 transitions. Word has length 11 [2018-04-13 00:07:23,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:23,429 INFO L459 AbstractCegarLoop]: Abstraction has 49 states and 52 transitions. [2018-04-13 00:07:23,430 INFO L460 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-04-13 00:07:23,430 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 52 transitions. [2018-04-13 00:07:23,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-04-13 00:07:23,430 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:23,430 INFO L355 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:23,430 INFO L408 AbstractCegarLoop]: === Iteration 2 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:23,431 INFO L82 PathProgramCache]: Analyzing trace with hash 1100032001, now seen corresponding path program 1 times [2018-04-13 00:07:23,431 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:23,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:23,446 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:23,496 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,496 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-13 00:07:23,496 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-04-13 00:07:23,496 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:23,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,497 INFO L182 omatonBuilderFactory]: Interpolants [164#true, 165#false, 166#(= 0 main_~i~1), 167#(= 0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|), 168#(and (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 0))] [2018-04-13 00:07:23,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,498 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-13 00:07:23,498 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-13 00:07:23,499 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-04-13 00:07:23,499 INFO L87 Difference]: Start difference. First operand 49 states and 52 transitions. Second operand 5 states. [2018-04-13 00:07:23,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:23,614 INFO L93 Difference]: Finished difference Result 65 states and 68 transitions. [2018-04-13 00:07:23,615 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-13 00:07:23,615 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 16 [2018-04-13 00:07:23,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:23,616 INFO L225 Difference]: With dead ends: 65 [2018-04-13 00:07:23,616 INFO L226 Difference]: Without dead ends: 65 [2018-04-13 00:07:23,617 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 1 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-04-13 00:07:23,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2018-04-13 00:07:23,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 56. [2018-04-13 00:07:23,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 56 states. [2018-04-13 00:07:23,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 59 transitions. [2018-04-13 00:07:23,624 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 59 transitions. Word has length 16 [2018-04-13 00:07:23,624 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:23,624 INFO L459 AbstractCegarLoop]: Abstraction has 56 states and 59 transitions. [2018-04-13 00:07:23,624 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-13 00:07:23,625 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 59 transitions. [2018-04-13 00:07:23,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-04-13 00:07:23,625 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:23,625 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:23,626 INFO L408 AbstractCegarLoop]: === Iteration 3 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:23,626 INFO L82 PathProgramCache]: Analyzing trace with hash 1974903447, now seen corresponding path program 1 times [2018-04-13 00:07:23,627 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:23,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:23,640 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:23,676 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,676 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-13 00:07:23,676 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-04-13 00:07:23,676 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:23,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,676 INFO L182 omatonBuilderFactory]: Interpolants [292#true, 293#false, 294#(<= 0 main_~i~1), 295#(<= 1 main_~i~1), 296#(and (<= main_~i~1 31) (<= 1 main_~i~1))] [2018-04-13 00:07:23,676 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,677 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-13 00:07:23,677 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-13 00:07:23,677 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-13 00:07:23,677 INFO L87 Difference]: Start difference. First operand 56 states and 59 transitions. Second operand 5 states. [2018-04-13 00:07:23,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:23,717 INFO L93 Difference]: Finished difference Result 65 states and 67 transitions. [2018-04-13 00:07:23,718 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-13 00:07:23,718 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 23 [2018-04-13 00:07:23,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:23,719 INFO L225 Difference]: With dead ends: 65 [2018-04-13 00:07:23,719 INFO L226 Difference]: Without dead ends: 65 [2018-04-13 00:07:23,719 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-13 00:07:23,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2018-04-13 00:07:23,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 53. [2018-04-13 00:07:23,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2018-04-13 00:07:23,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 56 transitions. [2018-04-13 00:07:23,722 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 56 transitions. Word has length 23 [2018-04-13 00:07:23,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:23,722 INFO L459 AbstractCegarLoop]: Abstraction has 53 states and 56 transitions. [2018-04-13 00:07:23,722 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-13 00:07:23,722 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 56 transitions. [2018-04-13 00:07:23,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-04-13 00:07:23,727 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:23,727 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:23,727 INFO L408 AbstractCegarLoop]: === Iteration 4 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:23,727 INFO L82 PathProgramCache]: Analyzing trace with hash 621927392, now seen corresponding path program 1 times [2018-04-13 00:07:23,728 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:23,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:23,738 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:23,757 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2018-04-13 00:07:23,757 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-13 00:07:23,758 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2018-04-13 00:07:23,758 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:23,758 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,758 INFO L182 omatonBuilderFactory]: Interpolants [416#false, 417#(= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0), 415#true] [2018-04-13 00:07:23,758 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2018-04-13 00:07:23,759 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-04-13 00:07:23,759 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-04-13 00:07:23,759 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-04-13 00:07:23,759 INFO L87 Difference]: Start difference. First operand 53 states and 56 transitions. Second operand 3 states. [2018-04-13 00:07:23,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:23,787 INFO L93 Difference]: Finished difference Result 64 states and 68 transitions. [2018-04-13 00:07:23,787 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-04-13 00:07:23,788 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-04-13 00:07:23,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:23,790 INFO L225 Difference]: With dead ends: 64 [2018-04-13 00:07:23,790 INFO L226 Difference]: Without dead ends: 64 [2018-04-13 00:07:23,790 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-04-13 00:07:23,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2018-04-13 00:07:23,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 56. [2018-04-13 00:07:23,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 56 states. [2018-04-13 00:07:23,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 60 transitions. [2018-04-13 00:07:23,795 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 60 transitions. Word has length 28 [2018-04-13 00:07:23,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:23,796 INFO L459 AbstractCegarLoop]: Abstraction has 56 states and 60 transitions. [2018-04-13 00:07:23,796 INFO L460 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-04-13 00:07:23,796 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 60 transitions. [2018-04-13 00:07:23,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-04-13 00:07:23,797 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:23,797 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:23,797 INFO L408 AbstractCegarLoop]: === Iteration 5 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:23,797 INFO L82 PathProgramCache]: Analyzing trace with hash 2099880015, now seen corresponding path program 1 times [2018-04-13 00:07:23,798 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:23,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:23,809 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:23,861 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-13 00:07:23,861 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:23,861 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6] total 6 [2018-04-13 00:07:23,861 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:23,861 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,862 INFO L182 omatonBuilderFactory]: Interpolants [544#(and (<= 0 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~b.offset 0) (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 31) (= 32 (select |#length| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~b.base))), 538#true, 539#false, 540#(and (= 32 (select |#length| |main_~#mask~0.base|)) (= 0 |main_~#mask~0.offset|)), 541#(and (= 32 (select |#length| main_~c~0.base)) (= 0 main_~c~0.offset)), 542#(and (= 0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~b.offset|) (= 32 (select |#length| |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~b.base|))), 543#(and (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~b.offset 0) (= 32 (select |#length| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~b.base)))] [2018-04-13 00:07:23,862 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-13 00:07:23,862 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-13 00:07:23,862 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-13 00:07:23,862 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2018-04-13 00:07:23,863 INFO L87 Difference]: Start difference. First operand 56 states and 60 transitions. Second operand 7 states. [2018-04-13 00:07:23,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:23,937 INFO L93 Difference]: Finished difference Result 58 states and 62 transitions. [2018-04-13 00:07:23,937 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-04-13 00:07:23,937 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 29 [2018-04-13 00:07:23,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:23,938 INFO L225 Difference]: With dead ends: 58 [2018-04-13 00:07:23,938 INFO L226 Difference]: Without dead ends: 58 [2018-04-13 00:07:23,939 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:23,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2018-04-13 00:07:23,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 55. [2018-04-13 00:07:23,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2018-04-13 00:07:23,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 59 transitions. [2018-04-13 00:07:23,944 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 59 transitions. Word has length 29 [2018-04-13 00:07:23,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:23,944 INFO L459 AbstractCegarLoop]: Abstraction has 55 states and 59 transitions. [2018-04-13 00:07:23,944 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-13 00:07:23,944 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 59 transitions. [2018-04-13 00:07:23,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-04-13 00:07:23,945 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:23,945 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:23,945 INFO L408 AbstractCegarLoop]: === Iteration 6 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:23,945 INFO L82 PathProgramCache]: Analyzing trace with hash 2099880014, now seen corresponding path program 1 times [2018-04-13 00:07:23,946 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:23,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:23,955 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:23,984 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-13 00:07:23,984 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:23,985 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [5] total 5 [2018-04-13 00:07:23,985 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:23,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:23,985 INFO L182 omatonBuilderFactory]: Interpolants [666#true, 667#false, 668#(= 1 (select |#valid| |main_~#mask~0.base|)), 669#(= 1 (select |#valid| main_~c~0.base)), 670#(= 1 (select |#valid| |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~b.base|)), 671#(= 1 (select |#valid| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~b.base))] [2018-04-13 00:07:23,985 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-13 00:07:23,985 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-04-13 00:07:23,985 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-04-13 00:07:23,985 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-04-13 00:07:23,986 INFO L87 Difference]: Start difference. First operand 55 states and 59 transitions. Second operand 6 states. [2018-04-13 00:07:24,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,023 INFO L93 Difference]: Finished difference Result 54 states and 58 transitions. [2018-04-13 00:07:24,023 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-13 00:07:24,023 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 29 [2018-04-13 00:07:24,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,024 INFO L225 Difference]: With dead ends: 54 [2018-04-13 00:07:24,024 INFO L226 Difference]: Without dead ends: 54 [2018-04-13 00:07:24,024 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2018-04-13 00:07:24,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2018-04-13 00:07:24,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 54 states. [2018-04-13 00:07:24,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 58 transitions. [2018-04-13 00:07:24,026 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 58 transitions. Word has length 29 [2018-04-13 00:07:24,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,027 INFO L459 AbstractCegarLoop]: Abstraction has 54 states and 58 transitions. [2018-04-13 00:07:24,027 INFO L460 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-04-13 00:07:24,027 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 58 transitions. [2018-04-13 00:07:24,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-04-13 00:07:24,028 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,028 INFO L355 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,028 INFO L408 AbstractCegarLoop]: === Iteration 7 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,028 INFO L82 PathProgramCache]: Analyzing trace with hash 1474818454, now seen corresponding path program 1 times [2018-04-13 00:07:24,029 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,035 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,072 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,073 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,073 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-13 00:07:24,073 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,073 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,073 INFO L182 omatonBuilderFactory]: Interpolants [785#true, 786#false, 787#(= main_~i~1 0), 788#(= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0), 789#(= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#res| 0), 790#(and (= |main_#t~ret3| 0) (= main_~i~1 0)), 791#(= (select main_~b~0 0) 0), 792#(= main_~i~1 (select main_~b~0 main_~i~1))] [2018-04-13 00:07:24,073 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,074 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-13 00:07:24,074 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-13 00:07:24,074 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,074 INFO L87 Difference]: Start difference. First operand 54 states and 58 transitions. Second operand 8 states. [2018-04-13 00:07:24,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,166 INFO L93 Difference]: Finished difference Result 80 states and 87 transitions. [2018-04-13 00:07:24,166 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-04-13 00:07:24,166 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 31 [2018-04-13 00:07:24,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,167 INFO L225 Difference]: With dead ends: 80 [2018-04-13 00:07:24,167 INFO L226 Difference]: Without dead ends: 80 [2018-04-13 00:07:24,167 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:24,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2018-04-13 00:07:24,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 63. [2018-04-13 00:07:24,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 63 states. [2018-04-13 00:07:24,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 68 transitions. [2018-04-13 00:07:24,169 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 68 transitions. Word has length 31 [2018-04-13 00:07:24,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,170 INFO L459 AbstractCegarLoop]: Abstraction has 63 states and 68 transitions. [2018-04-13 00:07:24,170 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-13 00:07:24,170 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 68 transitions. [2018-04-13 00:07:24,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2018-04-13 00:07:24,170 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,170 INFO L355 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,170 INFO L408 AbstractCegarLoop]: === Iteration 8 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,170 INFO L82 PathProgramCache]: Analyzing trace with hash -533212584, now seen corresponding path program 1 times [2018-04-13 00:07:24,171 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,177 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,213 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,213 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,213 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-13 00:07:24,213 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,214 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,214 INFO L182 omatonBuilderFactory]: Interpolants [944#(= main_~i~1 0), 945#(<= main_~i~1 1), 946#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 1), 947#(<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1), 948#(<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 1)), 949#(<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0), 942#true, 943#false] [2018-04-13 00:07:24,214 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,214 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-13 00:07:24,214 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-13 00:07:24,214 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,214 INFO L87 Difference]: Start difference. First operand 63 states and 68 transitions. Second operand 8 states. [2018-04-13 00:07:24,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,293 INFO L93 Difference]: Finished difference Result 92 states and 97 transitions. [2018-04-13 00:07:24,293 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-04-13 00:07:24,293 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 34 [2018-04-13 00:07:24,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,294 INFO L225 Difference]: With dead ends: 92 [2018-04-13 00:07:24,295 INFO L226 Difference]: Without dead ends: 92 [2018-04-13 00:07:24,295 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:24,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2018-04-13 00:07:24,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 77. [2018-04-13 00:07:24,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77 states. [2018-04-13 00:07:24,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 83 transitions. [2018-04-13 00:07:24,300 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 83 transitions. Word has length 34 [2018-04-13 00:07:24,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,300 INFO L459 AbstractCegarLoop]: Abstraction has 77 states and 83 transitions. [2018-04-13 00:07:24,300 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-13 00:07:24,300 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 83 transitions. [2018-04-13 00:07:24,301 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-04-13 00:07:24,301 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,301 INFO L355 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,301 INFO L408 AbstractCegarLoop]: === Iteration 9 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,301 INFO L82 PathProgramCache]: Analyzing trace with hash -2137316393, now seen corresponding path program 2 times [2018-04-13 00:07:24,302 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,312 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,335 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-04-13 00:07:24,335 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,335 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [5] total 5 [2018-04-13 00:07:24,335 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,336 INFO L182 omatonBuilderFactory]: Interpolants [1125#true, 1126#false, 1127#(= main_~i~1 0), 1128#(<= main_~i~1 1), 1129#(<= main_~i~1 2)] [2018-04-13 00:07:24,336 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-04-13 00:07:24,336 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-13 00:07:24,336 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-13 00:07:24,336 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-13 00:07:24,336 INFO L87 Difference]: Start difference. First operand 77 states and 83 transitions. Second operand 5 states. [2018-04-13 00:07:24,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,376 INFO L93 Difference]: Finished difference Result 108 states and 114 transitions. [2018-04-13 00:07:24,377 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-13 00:07:24,377 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 43 [2018-04-13 00:07:24,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,377 INFO L225 Difference]: With dead ends: 108 [2018-04-13 00:07:24,378 INFO L226 Difference]: Without dead ends: 108 [2018-04-13 00:07:24,378 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-13 00:07:24,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2018-04-13 00:07:24,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 86. [2018-04-13 00:07:24,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2018-04-13 00:07:24,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 93 transitions. [2018-04-13 00:07:24,381 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 93 transitions. Word has length 43 [2018-04-13 00:07:24,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,381 INFO L459 AbstractCegarLoop]: Abstraction has 86 states and 93 transitions. [2018-04-13 00:07:24,381 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-13 00:07:24,381 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 93 transitions. [2018-04-13 00:07:24,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-04-13 00:07:24,382 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,382 INFO L355 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,382 INFO L408 AbstractCegarLoop]: === Iteration 10 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,382 INFO L82 PathProgramCache]: Analyzing trace with hash 763161719, now seen corresponding path program 2 times [2018-04-13 00:07:24,383 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,390 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,451 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-04-13 00:07:24,452 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-13 00:07:24,452 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-04-13 00:07:24,452 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,452 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,452 INFO L182 omatonBuilderFactory]: Interpolants [1328#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 1329#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 1330#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 0), 1324#true, 1325#false, 1326#(<= 0 main_~i~1), 1327#(<= 1 main_~i~1)] [2018-04-13 00:07:24,453 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-04-13 00:07:24,453 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-13 00:07:24,453 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-13 00:07:24,453 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-04-13 00:07:24,453 INFO L87 Difference]: Start difference. First operand 86 states and 93 transitions. Second operand 7 states. [2018-04-13 00:07:24,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,540 INFO L93 Difference]: Finished difference Result 100 states and 104 transitions. [2018-04-13 00:07:24,540 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-13 00:07:24,541 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 46 [2018-04-13 00:07:24,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,541 INFO L225 Difference]: With dead ends: 100 [2018-04-13 00:07:24,541 INFO L226 Difference]: Without dead ends: 94 [2018-04-13 00:07:24,541 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2018-04-13 00:07:24,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 86. [2018-04-13 00:07:24,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2018-04-13 00:07:24,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 91 transitions. [2018-04-13 00:07:24,545 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 91 transitions. Word has length 46 [2018-04-13 00:07:24,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,545 INFO L459 AbstractCegarLoop]: Abstraction has 86 states and 91 transitions. [2018-04-13 00:07:24,546 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-13 00:07:24,546 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 91 transitions. [2018-04-13 00:07:24,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-04-13 00:07:24,546 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,546 INFO L355 BasicCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,547 INFO L408 AbstractCegarLoop]: === Iteration 11 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,547 INFO L82 PathProgramCache]: Analyzing trace with hash 1798255855, now seen corresponding path program 3 times [2018-04-13 00:07:24,547 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,558 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,593 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 25 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2018-04-13 00:07:24,593 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,593 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7] total 7 [2018-04-13 00:07:24,594 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,594 INFO L182 omatonBuilderFactory]: Interpolants [1520#false, 1521#(<= main_~i~1 31), 1522#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 31), 1523#(<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 31), 1524#(and (<= 0 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 31)), 1525#(and (<= 1 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 31)), 1526#(and (<= 1 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 30)), 1519#true] [2018-04-13 00:07:24,594 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 25 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2018-04-13 00:07:24,594 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-13 00:07:24,594 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-13 00:07:24,594 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,595 INFO L87 Difference]: Start difference. First operand 86 states and 91 transitions. Second operand 8 states. [2018-04-13 00:07:24,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,653 INFO L93 Difference]: Finished difference Result 90 states and 94 transitions. [2018-04-13 00:07:24,653 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-04-13 00:07:24,653 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 52 [2018-04-13 00:07:24,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,654 INFO L225 Difference]: With dead ends: 90 [2018-04-13 00:07:24,654 INFO L226 Difference]: Without dead ends: 90 [2018-04-13 00:07:24,654 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=73, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:24,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2018-04-13 00:07:24,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 84. [2018-04-13 00:07:24,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 84 states. [2018-04-13 00:07:24,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 89 transitions. [2018-04-13 00:07:24,656 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 89 transitions. Word has length 52 [2018-04-13 00:07:24,657 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,657 INFO L459 AbstractCegarLoop]: Abstraction has 84 states and 89 transitions. [2018-04-13 00:07:24,657 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-13 00:07:24,657 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 89 transitions. [2018-04-13 00:07:24,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-04-13 00:07:24,657 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,657 INFO L355 BasicCegarLoop]: trace histogram [5, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,657 INFO L408 AbstractCegarLoop]: === Iteration 12 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,658 INFO L82 PathProgramCache]: Analyzing trace with hash -1970492696, now seen corresponding path program 1 times [2018-04-13 00:07:24,658 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,669 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,695 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2018-04-13 00:07:24,695 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,695 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6] total 6 [2018-04-13 00:07:24,695 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,696 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-13 00:07:24,696 INFO L182 omatonBuilderFactory]: Interpolants [1712#(<= main_~i~1 3), 1707#true, 1708#false, 1709#(= main_~i~1 0), 1710#(<= main_~i~1 1), 1711#(<= main_~i~1 2)] [2018-04-13 00:07:24,696 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2018-04-13 00:07:24,696 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-04-13 00:07:24,696 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-04-13 00:07:24,696 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=15, Unknown=0, NotChecked=0, Total=30 [2018-04-13 00:07:24,696 INFO L87 Difference]: Start difference. First operand 84 states and 89 transitions. Second operand 6 states. [2018-04-13 00:07:24,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,733 INFO L93 Difference]: Finished difference Result 122 states and 127 transitions. [2018-04-13 00:07:24,733 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-13 00:07:24,733 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 67 [2018-04-13 00:07:24,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,734 INFO L225 Difference]: With dead ends: 122 [2018-04-13 00:07:24,734 INFO L226 Difference]: Without dead ends: 122 [2018-04-13 00:07:24,734 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=15, Unknown=0, NotChecked=0, Total=30 [2018-04-13 00:07:24,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2018-04-13 00:07:24,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 95. [2018-04-13 00:07:24,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 95 states. [2018-04-13 00:07:24,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 102 transitions. [2018-04-13 00:07:24,736 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 102 transitions. Word has length 67 [2018-04-13 00:07:24,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,737 INFO L459 AbstractCegarLoop]: Abstraction has 95 states and 102 transitions. [2018-04-13 00:07:24,737 INFO L460 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-04-13 00:07:24,737 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 102 transitions. [2018-04-13 00:07:24,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-04-13 00:07:24,738 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,738 INFO L355 BasicCegarLoop]: trace histogram [7, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,742 INFO L408 AbstractCegarLoop]: === Iteration 13 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,742 INFO L82 PathProgramCache]: Analyzing trace with hash -1320798415, now seen corresponding path program 2 times [2018-04-13 00:07:24,742 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,753 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,794 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2018-04-13 00:07:24,795 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,795 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7] total 7 [2018-04-13 00:07:24,795 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,795 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-04-13 00:07:24,796 INFO L182 omatonBuilderFactory]: Interpolants [1936#(<= main_~i~1 4), 1930#true, 1931#false, 1932#(= main_~i~1 0), 1933#(<= main_~i~1 1), 1934#(<= main_~i~1 2), 1935#(<= main_~i~1 3)] [2018-04-13 00:07:24,796 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2018-04-13 00:07:24,796 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-13 00:07:24,796 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-13 00:07:24,796 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2018-04-13 00:07:24,797 INFO L87 Difference]: Start difference. First operand 95 states and 102 transitions. Second operand 7 states. [2018-04-13 00:07:24,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,840 INFO L93 Difference]: Finished difference Result 138 states and 144 transitions. [2018-04-13 00:07:24,840 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-04-13 00:07:24,840 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 85 [2018-04-13 00:07:24,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,841 INFO L225 Difference]: With dead ends: 138 [2018-04-13 00:07:24,841 INFO L226 Difference]: Without dead ends: 138 [2018-04-13 00:07:24,842 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2018-04-13 00:07:24,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 138 states. [2018-04-13 00:07:24,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 138 to 106. [2018-04-13 00:07:24,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106 states. [2018-04-13 00:07:24,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 115 transitions. [2018-04-13 00:07:24,845 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 115 transitions. Word has length 85 [2018-04-13 00:07:24,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,845 INFO L459 AbstractCegarLoop]: Abstraction has 106 states and 115 transitions. [2018-04-13 00:07:24,846 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-13 00:07:24,846 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 115 transitions. [2018-04-13 00:07:24,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-04-13 00:07:24,847 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,847 INFO L355 BasicCegarLoop]: trace histogram [9, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,847 INFO L408 AbstractCegarLoop]: === Iteration 14 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,847 INFO L82 PathProgramCache]: Analyzing trace with hash -825580742, now seen corresponding path program 3 times [2018-04-13 00:07:24,848 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,870 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:24,914 INFO L134 CoverageAnalysis]: Checked inductivity of 206 backedges. 0 proven. 70 refuted. 0 times theorem prover too weak. 136 trivial. 0 not checked. [2018-04-13 00:07:24,914 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:24,914 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-13 00:07:24,914 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:24,914 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2018-04-13 00:07:24,915 INFO L182 omatonBuilderFactory]: Interpolants [2181#true, 2182#false, 2183#(= main_~i~1 0), 2184#(<= main_~i~1 1), 2185#(<= main_~i~1 2), 2186#(<= main_~i~1 3), 2187#(<= main_~i~1 4), 2188#(<= main_~i~1 5)] [2018-04-13 00:07:24,915 INFO L134 CoverageAnalysis]: Checked inductivity of 206 backedges. 0 proven. 70 refuted. 0 times theorem prover too weak. 136 trivial. 0 not checked. [2018-04-13 00:07:24,915 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-13 00:07:24,915 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-13 00:07:24,915 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=28, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,915 INFO L87 Difference]: Start difference. First operand 106 states and 115 transitions. Second operand 8 states. [2018-04-13 00:07:24,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:24,972 INFO L93 Difference]: Finished difference Result 154 states and 161 transitions. [2018-04-13 00:07:24,972 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-04-13 00:07:24,972 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 103 [2018-04-13 00:07:24,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:24,973 INFO L225 Difference]: With dead ends: 154 [2018-04-13 00:07:24,973 INFO L226 Difference]: Without dead ends: 154 [2018-04-13 00:07:24,974 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=28, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:24,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2018-04-13 00:07:24,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 117. [2018-04-13 00:07:24,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 117 states. [2018-04-13 00:07:24,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 128 transitions. [2018-04-13 00:07:24,976 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 128 transitions. Word has length 103 [2018-04-13 00:07:24,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:24,976 INFO L459 AbstractCegarLoop]: Abstraction has 117 states and 128 transitions. [2018-04-13 00:07:24,976 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-13 00:07:24,976 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 128 transitions. [2018-04-13 00:07:24,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-04-13 00:07:24,977 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:24,977 INFO L355 BasicCegarLoop]: trace histogram [11, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:24,977 INFO L408 AbstractCegarLoop]: === Iteration 15 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:24,977 INFO L82 PathProgramCache]: Analyzing trace with hash 797540099, now seen corresponding path program 4 times [2018-04-13 00:07:24,978 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:24,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:24,994 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:25,041 INFO L134 CoverageAnalysis]: Checked inductivity of 312 backedges. 89 proven. 2 refuted. 0 times theorem prover too weak. 221 trivial. 0 not checked. [2018-04-13 00:07:25,042 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:25,042 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7] total 7 [2018-04-13 00:07:25,042 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:25,042 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-04-13 00:07:25,042 INFO L182 omatonBuilderFactory]: Interpolants [2464#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 1), 2465#(<= main_~i~1 1), 2466#(<= main_~i~1 2), 2460#true, 2461#false, 2462#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 2463#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:07:25,042 INFO L134 CoverageAnalysis]: Checked inductivity of 312 backedges. 89 proven. 2 refuted. 0 times theorem prover too weak. 221 trivial. 0 not checked. [2018-04-13 00:07:25,043 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-13 00:07:25,043 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-13 00:07:25,043 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-04-13 00:07:25,043 INFO L87 Difference]: Start difference. First operand 117 states and 128 transitions. Second operand 7 states. [2018-04-13 00:07:25,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:25,128 INFO L93 Difference]: Finished difference Result 168 states and 187 transitions. [2018-04-13 00:07:25,128 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-04-13 00:07:25,128 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 121 [2018-04-13 00:07:25,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:25,130 INFO L225 Difference]: With dead ends: 168 [2018-04-13 00:07:25,130 INFO L226 Difference]: Without dead ends: 168 [2018-04-13 00:07:25,130 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2018-04-13 00:07:25,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2018-04-13 00:07:25,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 126. [2018-04-13 00:07:25,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 126 states. [2018-04-13 00:07:25,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 141 transitions. [2018-04-13 00:07:25,135 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 141 transitions. Word has length 121 [2018-04-13 00:07:25,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:25,135 INFO L459 AbstractCegarLoop]: Abstraction has 126 states and 141 transitions. [2018-04-13 00:07:25,135 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-13 00:07:25,135 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 141 transitions. [2018-04-13 00:07:25,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2018-04-13 00:07:25,136 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:25,137 INFO L355 BasicCegarLoop]: trace histogram [12, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:25,137 INFO L408 AbstractCegarLoop]: === Iteration 16 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:25,137 INFO L82 PathProgramCache]: Analyzing trace with hash -1854228341, now seen corresponding path program 5 times [2018-04-13 00:07:25,138 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:25,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:25,151 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:25,194 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 94 proven. 55 refuted. 0 times theorem prover too weak. 205 trivial. 0 not checked. [2018-04-13 00:07:25,194 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:25,195 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-13 00:07:25,195 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:25,195 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 30 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2018-04-13 00:07:25,195 INFO L182 omatonBuilderFactory]: Interpolants [2768#(<= 1 main_~i~1), 2769#(<= 2 main_~i~1), 2770#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 2771#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 2772#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 1), 2765#true, 2766#false, 2767#(<= 0 main_~i~1)] [2018-04-13 00:07:25,196 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 94 proven. 55 refuted. 0 times theorem prover too weak. 205 trivial. 0 not checked. [2018-04-13 00:07:25,196 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-13 00:07:25,196 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-13 00:07:25,196 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:25,196 INFO L87 Difference]: Start difference. First operand 126 states and 141 transitions. Second operand 8 states. [2018-04-13 00:07:25,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:25,277 INFO L93 Difference]: Finished difference Result 140 states and 149 transitions. [2018-04-13 00:07:25,277 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-04-13 00:07:25,277 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 127 [2018-04-13 00:07:25,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:25,277 INFO L225 Difference]: With dead ends: 140 [2018-04-13 00:07:25,278 INFO L226 Difference]: Without dead ends: 137 [2018-04-13 00:07:25,278 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:25,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2018-04-13 00:07:25,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 123. [2018-04-13 00:07:25,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 123 states. [2018-04-13 00:07:25,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 134 transitions. [2018-04-13 00:07:25,280 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 134 transitions. Word has length 127 [2018-04-13 00:07:25,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:25,280 INFO L459 AbstractCegarLoop]: Abstraction has 123 states and 134 transitions. [2018-04-13 00:07:25,280 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-13 00:07:25,280 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 134 transitions. [2018-04-13 00:07:25,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2018-04-13 00:07:25,281 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:25,281 INFO L355 BasicCegarLoop]: trace histogram [15, 9, 9, 9, 9, 9, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:25,281 INFO L408 AbstractCegarLoop]: === Iteration 17 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:25,281 INFO L82 PathProgramCache]: Analyzing trace with hash 1667069347, now seen corresponding path program 6 times [2018-04-13 00:07:25,282 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:25,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:25,294 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:25,345 INFO L134 CoverageAnalysis]: Checked inductivity of 516 backedges. 0 proven. 102 refuted. 0 times theorem prover too weak. 414 trivial. 0 not checked. [2018-04-13 00:07:25,345 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:25,345 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2018-04-13 00:07:25,345 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:25,346 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2018-04-13 00:07:25,346 INFO L182 omatonBuilderFactory]: Interpolants [3040#true, 3041#false, 3042#(= main_~i~1 0), 3043#(<= main_~i~1 1), 3044#(<= main_~i~1 2), 3045#(<= main_~i~1 3), 3046#(<= main_~i~1 4), 3047#(<= main_~i~1 5), 3048#(<= main_~i~1 6)] [2018-04-13 00:07:25,346 INFO L134 CoverageAnalysis]: Checked inductivity of 516 backedges. 0 proven. 102 refuted. 0 times theorem prover too weak. 414 trivial. 0 not checked. [2018-04-13 00:07:25,346 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-04-13 00:07:25,346 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-04-13 00:07:25,346 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=36, Unknown=0, NotChecked=0, Total=72 [2018-04-13 00:07:25,346 INFO L87 Difference]: Start difference. First operand 123 states and 134 transitions. Second operand 9 states. [2018-04-13 00:07:25,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:25,459 INFO L93 Difference]: Finished difference Result 176 states and 184 transitions. [2018-04-13 00:07:25,459 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-04-13 00:07:25,460 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 145 [2018-04-13 00:07:25,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:25,460 INFO L225 Difference]: With dead ends: 176 [2018-04-13 00:07:25,460 INFO L226 Difference]: Without dead ends: 176 [2018-04-13 00:07:25,461 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=36, Unknown=0, NotChecked=0, Total=72 [2018-04-13 00:07:25,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2018-04-13 00:07:25,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 134. [2018-04-13 00:07:25,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 134 states. [2018-04-13 00:07:25,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 147 transitions. [2018-04-13 00:07:25,464 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 147 transitions. Word has length 145 [2018-04-13 00:07:25,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:25,464 INFO L459 AbstractCegarLoop]: Abstraction has 134 states and 147 transitions. [2018-04-13 00:07:25,464 INFO L460 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-04-13 00:07:25,465 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 147 transitions. [2018-04-13 00:07:25,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2018-04-13 00:07:25,466 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:25,466 INFO L355 BasicCegarLoop]: trace histogram [18, 11, 11, 11, 11, 11, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:25,466 INFO L408 AbstractCegarLoop]: === Iteration 18 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:25,467 INFO L82 PathProgramCache]: Analyzing trace with hash -418963468, now seen corresponding path program 7 times [2018-04-13 00:07:25,467 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:25,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:25,488 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:25,556 INFO L134 CoverageAnalysis]: Checked inductivity of 750 backedges. 206 proven. 10 refuted. 0 times theorem prover too weak. 534 trivial. 0 not checked. [2018-04-13 00:07:25,557 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:25,557 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-13 00:07:25,557 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:25,557 INFO L134 CoverageAnalysis]: Checked inductivity of 180 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2018-04-13 00:07:25,557 INFO L182 omatonBuilderFactory]: Interpolants [3360#false, 3361#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 3362#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 3363#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 3364#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 2), 3365#(<= main_~i~1 2), 3366#(<= main_~i~1 3), 3359#true] [2018-04-13 00:07:25,558 INFO L134 CoverageAnalysis]: Checked inductivity of 750 backedges. 206 proven. 10 refuted. 0 times theorem prover too weak. 534 trivial. 0 not checked. [2018-04-13 00:07:25,558 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-13 00:07:25,558 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-13 00:07:25,558 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-04-13 00:07:25,558 INFO L87 Difference]: Start difference. First operand 134 states and 147 transitions. Second operand 8 states. [2018-04-13 00:07:25,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:25,641 INFO L93 Difference]: Finished difference Result 193 states and 217 transitions. [2018-04-13 00:07:25,641 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-04-13 00:07:25,641 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 169 [2018-04-13 00:07:25,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:25,643 INFO L225 Difference]: With dead ends: 193 [2018-04-13 00:07:25,643 INFO L226 Difference]: Without dead ends: 193 [2018-04-13 00:07:25,643 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:25,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2018-04-13 00:07:25,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 143. [2018-04-13 00:07:25,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 143 states. [2018-04-13 00:07:25,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 161 transitions. [2018-04-13 00:07:25,648 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 161 transitions. Word has length 169 [2018-04-13 00:07:25,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:25,649 INFO L459 AbstractCegarLoop]: Abstraction has 143 states and 161 transitions. [2018-04-13 00:07:25,649 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-13 00:07:25,649 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 161 transitions. [2018-04-13 00:07:25,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2018-04-13 00:07:25,650 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:25,650 INFO L355 BasicCegarLoop]: trace histogram [19, 12, 12, 12, 12, 12, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:25,650 INFO L408 AbstractCegarLoop]: === Iteration 19 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:25,650 INFO L82 PathProgramCache]: Analyzing trace with hash -1459740484, now seen corresponding path program 8 times [2018-04-13 00:07:25,651 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:25,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:25,671 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:25,742 INFO L134 CoverageAnalysis]: Checked inductivity of 830 backedges. 0 proven. 140 refuted. 0 times theorem prover too weak. 690 trivial. 0 not checked. [2018-04-13 00:07:25,743 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:25,743 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2018-04-13 00:07:25,743 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:25,743 INFO L134 CoverageAnalysis]: Checked inductivity of 168 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 168 trivial. 0 not checked. [2018-04-13 00:07:25,743 INFO L182 omatonBuilderFactory]: Interpolants [3712#(<= main_~i~1 1), 3713#(<= main_~i~1 2), 3714#(<= main_~i~1 3), 3715#(<= main_~i~1 4), 3716#(<= main_~i~1 5), 3717#(<= main_~i~1 6), 3718#(<= main_~i~1 7), 3709#true, 3710#false, 3711#(= main_~i~1 0)] [2018-04-13 00:07:25,743 INFO L134 CoverageAnalysis]: Checked inductivity of 830 backedges. 0 proven. 140 refuted. 0 times theorem prover too weak. 690 trivial. 0 not checked. [2018-04-13 00:07:25,744 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-04-13 00:07:25,744 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-04-13 00:07:25,744 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=45, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:25,744 INFO L87 Difference]: Start difference. First operand 143 states and 161 transitions. Second operand 10 states. [2018-04-13 00:07:25,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:25,817 INFO L93 Difference]: Finished difference Result 211 states and 227 transitions. [2018-04-13 00:07:25,817 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-04-13 00:07:25,817 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 175 [2018-04-13 00:07:25,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:25,818 INFO L225 Difference]: With dead ends: 211 [2018-04-13 00:07:25,818 INFO L226 Difference]: Without dead ends: 211 [2018-04-13 00:07:25,818 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=45, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:25,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-04-13 00:07:25,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 154. [2018-04-13 00:07:25,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-04-13 00:07:25,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 175 transitions. [2018-04-13 00:07:25,821 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 175 transitions. Word has length 175 [2018-04-13 00:07:25,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:25,821 INFO L459 AbstractCegarLoop]: Abstraction has 154 states and 175 transitions. [2018-04-13 00:07:25,821 INFO L460 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-04-13 00:07:25,822 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 175 transitions. [2018-04-13 00:07:25,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2018-04-13 00:07:25,822 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:25,822 INFO L355 BasicCegarLoop]: trace histogram [22, 14, 14, 14, 14, 14, 9, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:25,823 INFO L408 AbstractCegarLoop]: === Iteration 20 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:25,823 INFO L82 PathProgramCache]: Analyzing trace with hash 1367975757, now seen corresponding path program 9 times [2018-04-13 00:07:25,823 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:25,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:25,846 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:25,957 INFO L134 CoverageAnalysis]: Checked inductivity of 1122 backedges. 201 proven. 172 refuted. 0 times theorem prover too weak. 749 trivial. 0 not checked. [2018-04-13 00:07:25,957 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:25,957 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2018-04-13 00:07:25,957 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:25,958 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 17 proven. 65 refuted. 0 times theorem prover too weak. 173 trivial. 0 not checked. [2018-04-13 00:07:25,958 INFO L182 omatonBuilderFactory]: Interpolants [4084#true, 4085#false, 4086#(<= 0 main_~i~1), 4087#(<= 1 main_~i~1), 4088#(<= 2 main_~i~1), 4089#(<= 3 main_~i~1), 4090#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 4091#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 4092#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 4093#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 2)] [2018-04-13 00:07:25,959 INFO L134 CoverageAnalysis]: Checked inductivity of 1122 backedges. 201 proven. 172 refuted. 0 times theorem prover too weak. 749 trivial. 0 not checked. [2018-04-13 00:07:25,959 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-04-13 00:07:25,959 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-04-13 00:07:25,959 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:25,960 INFO L87 Difference]: Start difference. First operand 154 states and 175 transitions. Second operand 10 states. [2018-04-13 00:07:26,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:26,117 INFO L93 Difference]: Finished difference Result 173 states and 186 transitions. [2018-04-13 00:07:26,117 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-04-13 00:07:26,117 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 199 [2018-04-13 00:07:26,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:26,118 INFO L225 Difference]: With dead ends: 173 [2018-04-13 00:07:26,118 INFO L226 Difference]: Without dead ends: 173 [2018-04-13 00:07:26,118 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:26,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2018-04-13 00:07:26,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 154. [2018-04-13 00:07:26,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-04-13 00:07:26,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 170 transitions. [2018-04-13 00:07:26,121 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 170 transitions. Word has length 199 [2018-04-13 00:07:26,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:26,121 INFO L459 AbstractCegarLoop]: Abstraction has 154 states and 170 transitions. [2018-04-13 00:07:26,121 INFO L460 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-04-13 00:07:26,121 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 170 transitions. [2018-04-13 00:07:26,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 224 [2018-04-13 00:07:26,122 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:26,122 INFO L355 BasicCegarLoop]: trace histogram [26, 18, 18, 18, 18, 18, 9, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:26,122 INFO L408 AbstractCegarLoop]: === Iteration 21 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:26,123 INFO L82 PathProgramCache]: Analyzing trace with hash 354968301, now seen corresponding path program 10 times [2018-04-13 00:07:26,123 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:26,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:26,141 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:26,205 INFO L134 CoverageAnalysis]: Checked inductivity of 1558 backedges. 0 proven. 184 refuted. 0 times theorem prover too weak. 1374 trivial. 0 not checked. [2018-04-13 00:07:26,205 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:26,205 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2018-04-13 00:07:26,205 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:26,206 INFO L134 CoverageAnalysis]: Checked inductivity of 315 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 315 trivial. 0 not checked. [2018-04-13 00:07:26,206 INFO L182 omatonBuilderFactory]: Interpolants [4432#(<= main_~i~1 3), 4433#(<= main_~i~1 4), 4434#(<= main_~i~1 5), 4435#(<= main_~i~1 6), 4436#(<= main_~i~1 7), 4437#(<= main_~i~1 8), 4427#true, 4428#false, 4429#(= main_~i~1 0), 4430#(<= main_~i~1 1), 4431#(<= main_~i~1 2)] [2018-04-13 00:07:26,206 INFO L134 CoverageAnalysis]: Checked inductivity of 1558 backedges. 0 proven. 184 refuted. 0 times theorem prover too weak. 1374 trivial. 0 not checked. [2018-04-13 00:07:26,206 INFO L442 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-04-13 00:07:26,206 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-04-13 00:07:26,206 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=55, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:26,207 INFO L87 Difference]: Start difference. First operand 154 states and 170 transitions. Second operand 11 states. [2018-04-13 00:07:26,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:26,340 INFO L93 Difference]: Finished difference Result 217 states and 228 transitions. [2018-04-13 00:07:26,340 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-04-13 00:07:26,340 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 223 [2018-04-13 00:07:26,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:26,341 INFO L225 Difference]: With dead ends: 217 [2018-04-13 00:07:26,342 INFO L226 Difference]: Without dead ends: 217 [2018-04-13 00:07:26,342 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=55, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:26,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 217 states. [2018-04-13 00:07:26,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 217 to 165. [2018-04-13 00:07:26,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 165 states. [2018-04-13 00:07:26,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 183 transitions. [2018-04-13 00:07:26,346 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 183 transitions. Word has length 223 [2018-04-13 00:07:26,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:26,346 INFO L459 AbstractCegarLoop]: Abstraction has 165 states and 183 transitions. [2018-04-13 00:07:26,346 INFO L460 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-04-13 00:07:26,346 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 183 transitions. [2018-04-13 00:07:26,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 254 [2018-04-13 00:07:26,347 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:26,347 INFO L355 BasicCegarLoop]: trace histogram [30, 21, 21, 21, 21, 21, 10, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:26,347 INFO L408 AbstractCegarLoop]: === Iteration 22 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:26,347 INFO L82 PathProgramCache]: Analyzing trace with hash 704000134, now seen corresponding path program 11 times [2018-04-13 00:07:26,348 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:26,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:26,364 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:26,444 INFO L134 CoverageAnalysis]: Checked inductivity of 2088 backedges. 482 proven. 24 refuted. 0 times theorem prover too weak. 1582 trivial. 0 not checked. [2018-04-13 00:07:26,445 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:26,445 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2018-04-13 00:07:26,445 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:26,445 INFO L134 CoverageAnalysis]: Checked inductivity of 450 backedges. 129 proven. 0 refuted. 0 times theorem prover too weak. 321 trivial. 0 not checked. [2018-04-13 00:07:26,446 INFO L182 omatonBuilderFactory]: Interpolants [4820#true, 4821#false, 4822#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 4823#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 4824#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 4825#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 4826#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 3), 4827#(<= main_~i~1 3), 4828#(<= main_~i~1 4)] [2018-04-13 00:07:26,446 INFO L134 CoverageAnalysis]: Checked inductivity of 2088 backedges. 482 proven. 24 refuted. 0 times theorem prover too weak. 1582 trivial. 0 not checked. [2018-04-13 00:07:26,446 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-04-13 00:07:26,447 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-04-13 00:07:26,447 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2018-04-13 00:07:26,447 INFO L87 Difference]: Start difference. First operand 165 states and 183 transitions. Second operand 9 states. [2018-04-13 00:07:26,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:26,557 INFO L93 Difference]: Finished difference Result 240 states and 275 transitions. [2018-04-13 00:07:26,557 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-04-13 00:07:26,557 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 253 [2018-04-13 00:07:26,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:26,558 INFO L225 Difference]: With dead ends: 240 [2018-04-13 00:07:26,558 INFO L226 Difference]: Without dead ends: 240 [2018-04-13 00:07:26,559 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:26,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-04-13 00:07:26,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 174. [2018-04-13 00:07:26,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 174 states. [2018-04-13 00:07:26,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 199 transitions. [2018-04-13 00:07:26,565 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 199 transitions. Word has length 253 [2018-04-13 00:07:26,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:26,566 INFO L459 AbstractCegarLoop]: Abstraction has 174 states and 199 transitions. [2018-04-13 00:07:26,566 INFO L460 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-04-13 00:07:26,566 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 199 transitions. [2018-04-13 00:07:26,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 260 [2018-04-13 00:07:26,568 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:26,568 INFO L355 BasicCegarLoop]: trace histogram [31, 22, 22, 22, 22, 22, 10, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:26,568 INFO L408 AbstractCegarLoop]: === Iteration 23 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:26,568 INFO L82 PathProgramCache]: Analyzing trace with hash 1269758926, now seen corresponding path program 12 times [2018-04-13 00:07:26,569 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:26,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:26,596 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:26,713 INFO L134 CoverageAnalysis]: Checked inductivity of 2232 backedges. 606 proven. 44 refuted. 0 times theorem prover too weak. 1582 trivial. 0 not checked. [2018-04-13 00:07:26,713 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:26,713 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2018-04-13 00:07:26,714 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:26,714 INFO L134 CoverageAnalysis]: Checked inductivity of 435 backedges. 114 proven. 0 refuted. 0 times theorem prover too weak. 321 trivial. 0 not checked. [2018-04-13 00:07:26,715 INFO L182 omatonBuilderFactory]: Interpolants [5251#true, 5252#false, 5253#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 5254#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 5255#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 5256#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 5257#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 5258#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 4), 5259#(<= main_~i~1 4), 5260#(<= main_~i~1 5)] [2018-04-13 00:07:26,715 INFO L134 CoverageAnalysis]: Checked inductivity of 2232 backedges. 606 proven. 44 refuted. 0 times theorem prover too weak. 1582 trivial. 0 not checked. [2018-04-13 00:07:26,716 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-04-13 00:07:26,716 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-04-13 00:07:26,716 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:26,716 INFO L87 Difference]: Start difference. First operand 174 states and 199 transitions. Second operand 10 states. [2018-04-13 00:07:26,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:26,862 INFO L93 Difference]: Finished difference Result 249 states and 297 transitions. [2018-04-13 00:07:26,862 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-04-13 00:07:26,862 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 259 [2018-04-13 00:07:26,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:26,863 INFO L225 Difference]: With dead ends: 249 [2018-04-13 00:07:26,863 INFO L226 Difference]: Without dead ends: 249 [2018-04-13 00:07:26,864 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=68, Invalid=142, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:26,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 249 states. [2018-04-13 00:07:26,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 249 to 180. [2018-04-13 00:07:26,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 180 states. [2018-04-13 00:07:26,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 206 transitions. [2018-04-13 00:07:26,870 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 206 transitions. Word has length 259 [2018-04-13 00:07:26,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:26,870 INFO L459 AbstractCegarLoop]: Abstraction has 180 states and 206 transitions. [2018-04-13 00:07:26,870 INFO L460 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-04-13 00:07:26,871 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 206 transitions. [2018-04-13 00:07:26,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 266 [2018-04-13 00:07:26,872 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:26,872 INFO L355 BasicCegarLoop]: trace histogram [32, 23, 23, 23, 23, 23, 10, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:26,872 INFO L408 AbstractCegarLoop]: === Iteration 24 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:26,872 INFO L82 PathProgramCache]: Analyzing trace with hash -1255919338, now seen corresponding path program 13 times [2018-04-13 00:07:26,873 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:26,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:26,898 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:26,997 INFO L134 CoverageAnalysis]: Checked inductivity of 2382 backedges. 0 proven. 234 refuted. 0 times theorem prover too weak. 2148 trivial. 0 not checked. [2018-04-13 00:07:26,997 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:26,997 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-13 00:07:26,997 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:26,998 INFO L134 CoverageAnalysis]: Checked inductivity of 435 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 435 trivial. 0 not checked. [2018-04-13 00:07:26,998 INFO L182 omatonBuilderFactory]: Interpolants [5700#true, 5701#false, 5702#(= main_~i~1 0), 5703#(<= main_~i~1 1), 5704#(<= main_~i~1 2), 5705#(<= main_~i~1 3), 5706#(<= main_~i~1 4), 5707#(<= main_~i~1 5), 5708#(<= main_~i~1 6), 5709#(<= main_~i~1 7), 5710#(<= main_~i~1 8), 5711#(<= main_~i~1 9)] [2018-04-13 00:07:26,998 INFO L134 CoverageAnalysis]: Checked inductivity of 2382 backedges. 0 proven. 234 refuted. 0 times theorem prover too weak. 2148 trivial. 0 not checked. [2018-04-13 00:07:26,998 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-13 00:07:26,999 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-13 00:07:26,999 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=66, Unknown=0, NotChecked=0, Total=132 [2018-04-13 00:07:26,999 INFO L87 Difference]: Start difference. First operand 180 states and 206 transitions. Second operand 12 states. [2018-04-13 00:07:27,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:27,151 INFO L93 Difference]: Finished difference Result 258 states and 280 transitions. [2018-04-13 00:07:27,151 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-04-13 00:07:27,151 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 265 [2018-04-13 00:07:27,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:27,152 INFO L225 Difference]: With dead ends: 258 [2018-04-13 00:07:27,152 INFO L226 Difference]: Without dead ends: 258 [2018-04-13 00:07:27,152 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=66, Unknown=0, NotChecked=0, Total=132 [2018-04-13 00:07:27,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2018-04-13 00:07:27,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 191. [2018-04-13 00:07:27,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2018-04-13 00:07:27,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 220 transitions. [2018-04-13 00:07:27,157 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 220 transitions. Word has length 265 [2018-04-13 00:07:27,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:27,158 INFO L459 AbstractCegarLoop]: Abstraction has 191 states and 220 transitions. [2018-04-13 00:07:27,158 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-13 00:07:27,158 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 220 transitions. [2018-04-13 00:07:27,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 296 [2018-04-13 00:07:27,160 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:27,160 INFO L355 BasicCegarLoop]: trace histogram [36, 26, 26, 26, 26, 26, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:27,160 INFO L408 AbstractCegarLoop]: === Iteration 25 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:27,160 INFO L82 PathProgramCache]: Analyzing trace with hash -478351505, now seen corresponding path program 14 times [2018-04-13 00:07:27,161 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:27,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:27,187 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:27,300 INFO L134 CoverageAnalysis]: Checked inductivity of 3030 backedges. 534 proven. 139 refuted. 0 times theorem prover too weak. 2357 trivial. 0 not checked. [2018-04-13 00:07:27,300 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:27,300 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2018-04-13 00:07:27,300 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:27,301 INFO L134 CoverageAnalysis]: Checked inductivity of 591 backedges. 129 proven. 20 refuted. 0 times theorem prover too weak. 442 trivial. 0 not checked. [2018-04-13 00:07:27,301 INFO L182 omatonBuilderFactory]: Interpolants [6161#true, 6162#false, 6163#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 6164#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 6165#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 6166#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 6167#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 3), 6168#(<= main_~i~1 3), 6169#(<= main_~i~1 4), 6170#(<= main_~i~1 5)] [2018-04-13 00:07:27,302 INFO L134 CoverageAnalysis]: Checked inductivity of 3030 backedges. 534 proven. 139 refuted. 0 times theorem prover too weak. 2357 trivial. 0 not checked. [2018-04-13 00:07:27,302 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-04-13 00:07:27,302 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-04-13 00:07:27,303 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2018-04-13 00:07:27,303 INFO L87 Difference]: Start difference. First operand 191 states and 220 transitions. Second operand 10 states. [2018-04-13 00:07:27,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:27,452 INFO L93 Difference]: Finished difference Result 303 states and 375 transitions. [2018-04-13 00:07:27,452 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-04-13 00:07:27,452 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 295 [2018-04-13 00:07:27,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:27,454 INFO L225 Difference]: With dead ends: 303 [2018-04-13 00:07:27,454 INFO L226 Difference]: Without dead ends: 303 [2018-04-13 00:07:27,455 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=54, Invalid=128, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:27,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2018-04-13 00:07:27,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 194. [2018-04-13 00:07:27,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-04-13 00:07:27,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 230 transitions. [2018-04-13 00:07:27,463 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 230 transitions. Word has length 295 [2018-04-13 00:07:27,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:27,463 INFO L459 AbstractCegarLoop]: Abstraction has 194 states and 230 transitions. [2018-04-13 00:07:27,463 INFO L460 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-04-13 00:07:27,463 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 230 transitions. [2018-04-13 00:07:27,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 302 [2018-04-13 00:07:27,465 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:27,465 INFO L355 BasicCegarLoop]: trace histogram [37, 27, 27, 27, 27, 27, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:27,465 INFO L408 AbstractCegarLoop]: === Iteration 26 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:27,466 INFO L82 PathProgramCache]: Analyzing trace with hash -1133567817, now seen corresponding path program 15 times [2018-04-13 00:07:27,466 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:27,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:27,489 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:27,617 INFO L134 CoverageAnalysis]: Checked inductivity of 3206 backedges. 658 proven. 191 refuted. 0 times theorem prover too weak. 2357 trivial. 0 not checked. [2018-04-13 00:07:27,618 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:27,618 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2018-04-13 00:07:27,618 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:27,619 INFO L134 CoverageAnalysis]: Checked inductivity of 582 backedges. 114 proven. 26 refuted. 0 times theorem prover too weak. 442 trivial. 0 not checked. [2018-04-13 00:07:27,619 INFO L182 omatonBuilderFactory]: Interpolants [6676#true, 6677#false, 6678#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 6679#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 6680#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 6681#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 6682#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 6683#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 4), 6684#(<= main_~i~1 4), 6685#(<= main_~i~1 5), 6686#(<= main_~i~1 6)] [2018-04-13 00:07:27,620 INFO L134 CoverageAnalysis]: Checked inductivity of 3206 backedges. 658 proven. 191 refuted. 0 times theorem prover too weak. 2357 trivial. 0 not checked. [2018-04-13 00:07:27,620 INFO L442 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-04-13 00:07:27,620 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-04-13 00:07:27,621 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:27,621 INFO L87 Difference]: Start difference. First operand 194 states and 230 transitions. Second operand 11 states. [2018-04-13 00:07:27,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:27,790 INFO L93 Difference]: Finished difference Result 307 states and 379 transitions. [2018-04-13 00:07:27,791 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-04-13 00:07:27,791 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 301 [2018-04-13 00:07:27,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:27,793 INFO L225 Difference]: With dead ends: 307 [2018-04-13 00:07:27,793 INFO L226 Difference]: Without dead ends: 307 [2018-04-13 00:07:27,793 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=72, Invalid=168, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:27,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2018-04-13 00:07:27,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 191. [2018-04-13 00:07:27,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2018-04-13 00:07:27,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 220 transitions. [2018-04-13 00:07:27,801 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 220 transitions. Word has length 301 [2018-04-13 00:07:27,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:27,801 INFO L459 AbstractCegarLoop]: Abstraction has 191 states and 220 transitions. [2018-04-13 00:07:27,801 INFO L460 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-04-13 00:07:27,802 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 220 transitions. [2018-04-13 00:07:27,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 308 [2018-04-13 00:07:27,803 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:27,803 INFO L355 BasicCegarLoop]: trace histogram [38, 28, 28, 28, 28, 28, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:27,804 INFO L408 AbstractCegarLoop]: === Iteration 27 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:27,804 INFO L82 PathProgramCache]: Analyzing trace with hash -1980154881, now seen corresponding path program 16 times [2018-04-13 00:07:27,804 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:27,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:27,830 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:27,966 INFO L134 CoverageAnalysis]: Checked inductivity of 3388 backedges. 909 proven. 70 refuted. 0 times theorem prover too weak. 2409 trivial. 0 not checked. [2018-04-13 00:07:27,966 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:27,966 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2018-04-13 00:07:27,967 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:27,967 INFO L134 CoverageAnalysis]: Checked inductivity of 591 backedges. 149 proven. 0 refuted. 0 times theorem prover too weak. 442 trivial. 0 not checked. [2018-04-13 00:07:27,967 INFO L182 omatonBuilderFactory]: Interpolants [7200#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 7201#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 7202#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 7203#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 5), 7204#(<= main_~i~1 5), 7205#(<= main_~i~1 6), 7195#true, 7196#false, 7197#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 7198#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 7199#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:07:27,968 INFO L134 CoverageAnalysis]: Checked inductivity of 3388 backedges. 909 proven. 70 refuted. 0 times theorem prover too weak. 2409 trivial. 0 not checked. [2018-04-13 00:07:27,969 INFO L442 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-04-13 00:07:27,969 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-04-13 00:07:27,969 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2018-04-13 00:07:27,969 INFO L87 Difference]: Start difference. First operand 191 states and 220 transitions. Second operand 11 states. [2018-04-13 00:07:28,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:28,168 INFO L93 Difference]: Finished difference Result 277 states and 347 transitions. [2018-04-13 00:07:28,168 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-04-13 00:07:28,168 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 307 [2018-04-13 00:07:28,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:28,170 INFO L225 Difference]: With dead ends: 277 [2018-04-13 00:07:28,170 INFO L226 Difference]: Without dead ends: 277 [2018-04-13 00:07:28,170 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=89, Invalid=183, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:28,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2018-04-13 00:07:28,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 200. [2018-04-13 00:07:28,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 200 states. [2018-04-13 00:07:28,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 200 states to 200 states and 237 transitions. [2018-04-13 00:07:28,177 INFO L78 Accepts]: Start accepts. Automaton has 200 states and 237 transitions. Word has length 307 [2018-04-13 00:07:28,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:28,177 INFO L459 AbstractCegarLoop]: Abstraction has 200 states and 237 transitions. [2018-04-13 00:07:28,177 INFO L460 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-04-13 00:07:28,178 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 237 transitions. [2018-04-13 00:07:28,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 314 [2018-04-13 00:07:28,179 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:28,180 INFO L355 BasicCegarLoop]: trace histogram [39, 29, 29, 29, 29, 29, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:28,180 INFO L408 AbstractCegarLoop]: === Iteration 28 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:28,180 INFO L82 PathProgramCache]: Analyzing trace with hash 1120913543, now seen corresponding path program 17 times [2018-04-13 00:07:28,181 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:28,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:28,208 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:28,341 INFO L134 CoverageAnalysis]: Checked inductivity of 3576 backedges. 374 proven. 479 refuted. 0 times theorem prover too weak. 2723 trivial. 0 not checked. [2018-04-13 00:07:28,342 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:28,342 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-13 00:07:28,342 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:28,343 INFO L134 CoverageAnalysis]: Checked inductivity of 588 backedges. 37 proven. 109 refuted. 0 times theorem prover too weak. 442 trivial. 0 not checked. [2018-04-13 00:07:28,343 INFO L182 omatonBuilderFactory]: Interpolants [7696#false, 7697#(<= 0 main_~i~1), 7698#(<= 1 main_~i~1), 7699#(<= 2 main_~i~1), 7700#(<= 3 main_~i~1), 7701#(<= 4 main_~i~1), 7702#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 7703#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 7704#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 7705#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 7706#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 3), 7695#true] [2018-04-13 00:07:28,343 INFO L134 CoverageAnalysis]: Checked inductivity of 3576 backedges. 374 proven. 479 refuted. 0 times theorem prover too weak. 2723 trivial. 0 not checked. [2018-04-13 00:07:28,344 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-13 00:07:28,344 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-13 00:07:28,344 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2018-04-13 00:07:28,344 INFO L87 Difference]: Start difference. First operand 200 states and 237 transitions. Second operand 12 states. [2018-04-13 00:07:28,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:28,593 INFO L93 Difference]: Finished difference Result 223 states and 257 transitions. [2018-04-13 00:07:28,594 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-04-13 00:07:28,594 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 313 [2018-04-13 00:07:28,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:28,595 INFO L225 Difference]: With dead ends: 223 [2018-04-13 00:07:28,595 INFO L226 Difference]: Without dead ends: 223 [2018-04-13 00:07:28,596 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=65, Invalid=175, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:28,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-04-13 00:07:28,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 203. [2018-04-13 00:07:28,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-04-13 00:07:28,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 241 transitions. [2018-04-13 00:07:28,601 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 241 transitions. Word has length 313 [2018-04-13 00:07:28,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:28,602 INFO L459 AbstractCegarLoop]: Abstraction has 203 states and 241 transitions. [2018-04-13 00:07:28,602 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-13 00:07:28,602 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 241 transitions. [2018-04-13 00:07:28,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 338 [2018-04-13 00:07:28,604 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:28,604 INFO L355 BasicCegarLoop]: trace histogram [43, 33, 33, 33, 33, 33, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:28,605 INFO L408 AbstractCegarLoop]: === Iteration 29 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:28,605 INFO L82 PathProgramCache]: Analyzing trace with hash 1555650855, now seen corresponding path program 18 times [2018-04-13 00:07:28,606 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:28,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:28,635 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:28,811 INFO L134 CoverageAnalysis]: Checked inductivity of 4388 backedges. 0 proven. 290 refuted. 0 times theorem prover too weak. 4098 trivial. 0 not checked. [2018-04-13 00:07:28,811 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:28,811 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-13 00:07:28,811 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:28,812 INFO L134 CoverageAnalysis]: Checked inductivity of 660 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 660 trivial. 0 not checked. [2018-04-13 00:07:28,812 INFO L182 omatonBuilderFactory]: Interpolants [8141#true, 8142#false, 8143#(= main_~i~1 0), 8144#(<= main_~i~1 1), 8145#(<= main_~i~1 2), 8146#(<= main_~i~1 3), 8147#(<= main_~i~1 4), 8148#(<= main_~i~1 5), 8149#(<= main_~i~1 6), 8150#(<= main_~i~1 7), 8151#(<= main_~i~1 8), 8152#(<= main_~i~1 9), 8153#(<= main_~i~1 10)] [2018-04-13 00:07:28,812 INFO L134 CoverageAnalysis]: Checked inductivity of 4388 backedges. 0 proven. 290 refuted. 0 times theorem prover too weak. 4098 trivial. 0 not checked. [2018-04-13 00:07:28,812 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-13 00:07:28,813 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-13 00:07:28,813 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=78, Invalid=78, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:28,813 INFO L87 Difference]: Start difference. First operand 203 states and 241 transitions. Second operand 13 states. [2018-04-13 00:07:28,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:28,944 INFO L93 Difference]: Finished difference Result 306 states and 350 transitions. [2018-04-13 00:07:28,945 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-04-13 00:07:28,945 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 337 [2018-04-13 00:07:28,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:28,947 INFO L225 Difference]: With dead ends: 306 [2018-04-13 00:07:28,947 INFO L226 Difference]: Without dead ends: 306 [2018-04-13 00:07:28,947 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=78, Invalid=78, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:28,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2018-04-13 00:07:28,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 214. [2018-04-13 00:07:28,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2018-04-13 00:07:28,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 256 transitions. [2018-04-13 00:07:28,953 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 256 transitions. Word has length 337 [2018-04-13 00:07:28,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:28,954 INFO L459 AbstractCegarLoop]: Abstraction has 214 states and 256 transitions. [2018-04-13 00:07:28,954 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-13 00:07:28,954 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 256 transitions. [2018-04-13 00:07:28,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 374 [2018-04-13 00:07:28,957 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:28,957 INFO L355 BasicCegarLoop]: trace histogram [48, 37, 37, 37, 37, 37, 12, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:28,957 INFO L408 AbstractCegarLoop]: === Iteration 30 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:28,957 INFO L82 PathProgramCache]: Analyzing trace with hash -1011854648, now seen corresponding path program 19 times [2018-04-13 00:07:28,958 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:28,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:28,988 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:29,139 INFO L134 CoverageAnalysis]: Checked inductivity of 5492 backedges. 814 proven. 370 refuted. 0 times theorem prover too weak. 4308 trivial. 0 not checked. [2018-04-13 00:07:29,140 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:29,140 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-13 00:07:29,140 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:29,140 INFO L134 CoverageAnalysis]: Checked inductivity of 870 backedges. 150 proven. 52 refuted. 0 times theorem prover too weak. 668 trivial. 0 not checked. [2018-04-13 00:07:29,140 INFO L182 omatonBuilderFactory]: Interpolants [8674#true, 8675#false, 8676#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 8677#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 8678#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 8679#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 8680#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 8681#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 4), 8682#(<= main_~i~1 4), 8683#(<= main_~i~1 5), 8684#(<= main_~i~1 6), 8685#(<= main_~i~1 7)] [2018-04-13 00:07:29,141 INFO L134 CoverageAnalysis]: Checked inductivity of 5492 backedges. 814 proven. 370 refuted. 0 times theorem prover too weak. 4308 trivial. 0 not checked. [2018-04-13 00:07:29,141 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-13 00:07:29,141 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-13 00:07:29,141 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2018-04-13 00:07:29,141 INFO L87 Difference]: Start difference. First operand 214 states and 256 transitions. Second operand 12 states. [2018-04-13 00:07:29,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:29,346 INFO L93 Difference]: Finished difference Result 370 states and 469 transitions. [2018-04-13 00:07:29,346 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-04-13 00:07:29,346 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 373 [2018-04-13 00:07:29,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:29,349 INFO L225 Difference]: With dead ends: 370 [2018-04-13 00:07:29,349 INFO L226 Difference]: Without dead ends: 370 [2018-04-13 00:07:29,350 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=77, Invalid=195, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:29,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2018-04-13 00:07:29,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 214. [2018-04-13 00:07:29,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2018-04-13 00:07:29,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 256 transitions. [2018-04-13 00:07:29,359 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 256 transitions. Word has length 373 [2018-04-13 00:07:29,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:29,360 INFO L459 AbstractCegarLoop]: Abstraction has 214 states and 256 transitions. [2018-04-13 00:07:29,360 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-13 00:07:29,360 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 256 transitions. [2018-04-13 00:07:29,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 380 [2018-04-13 00:07:29,362 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:29,362 INFO L355 BasicCegarLoop]: trace histogram [49, 38, 38, 38, 38, 38, 12, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:29,362 INFO L408 AbstractCegarLoop]: === Iteration 31 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:29,363 INFO L82 PathProgramCache]: Analyzing trace with hash -339687920, now seen corresponding path program 20 times [2018-04-13 00:07:29,363 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:29,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:29,394 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:29,578 INFO L134 CoverageAnalysis]: Checked inductivity of 5736 backedges. 1095 proven. 281 refuted. 0 times theorem prover too weak. 4360 trivial. 0 not checked. [2018-04-13 00:07:29,578 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:29,579 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-13 00:07:29,579 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:29,579 INFO L134 CoverageAnalysis]: Checked inductivity of 873 backedges. 173 proven. 32 refuted. 0 times theorem prover too weak. 668 trivial. 0 not checked. [2018-04-13 00:07:29,579 INFO L182 omatonBuilderFactory]: Interpolants [9280#true, 9281#false, 9282#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 9283#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 9284#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 9285#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 9286#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 9287#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 9288#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 5), 9289#(<= main_~i~1 5), 9290#(<= main_~i~1 6), 9291#(<= main_~i~1 7)] [2018-04-13 00:07:29,580 INFO L134 CoverageAnalysis]: Checked inductivity of 5736 backedges. 1095 proven. 281 refuted. 0 times theorem prover too weak. 4360 trivial. 0 not checked. [2018-04-13 00:07:29,580 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-13 00:07:29,580 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-13 00:07:29,580 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2018-04-13 00:07:29,581 INFO L87 Difference]: Start difference. First operand 214 states and 256 transitions. Second operand 12 states. [2018-04-13 00:07:29,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:29,735 INFO L93 Difference]: Finished difference Result 341 states and 426 transitions. [2018-04-13 00:07:29,735 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-04-13 00:07:29,735 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 379 [2018-04-13 00:07:29,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:29,737 INFO L225 Difference]: With dead ends: 341 [2018-04-13 00:07:29,737 INFO L226 Difference]: Without dead ends: 341 [2018-04-13 00:07:29,737 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=93, Invalid=213, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:29,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 341 states. [2018-04-13 00:07:29,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 341 to 214. [2018-04-13 00:07:29,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2018-04-13 00:07:29,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 256 transitions. [2018-04-13 00:07:29,743 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 256 transitions. Word has length 379 [2018-04-13 00:07:29,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:29,743 INFO L459 AbstractCegarLoop]: Abstraction has 214 states and 256 transitions. [2018-04-13 00:07:29,743 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-13 00:07:29,743 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 256 transitions. [2018-04-13 00:07:29,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 386 [2018-04-13 00:07:29,745 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:29,745 INFO L355 BasicCegarLoop]: trace histogram [50, 39, 39, 39, 39, 39, 12, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:29,745 INFO L408 AbstractCegarLoop]: === Iteration 32 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:29,745 INFO L82 PathProgramCache]: Analyzing trace with hash 77081240, now seen corresponding path program 21 times [2018-04-13 00:07:29,746 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:29,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:29,765 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:29,918 INFO L134 CoverageAnalysis]: Checked inductivity of 5986 backedges. 1466 proven. 102 refuted. 0 times theorem prover too weak. 4418 trivial. 0 not checked. [2018-04-13 00:07:29,918 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:29,918 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-13 00:07:29,919 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:29,919 INFO L134 CoverageAnalysis]: Checked inductivity of 879 backedges. 211 proven. 0 refuted. 0 times theorem prover too weak. 668 trivial. 0 not checked. [2018-04-13 00:07:29,919 INFO L182 omatonBuilderFactory]: Interpolants [9859#true, 9860#false, 9861#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 9862#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 9863#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 9864#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 9865#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 9866#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 9867#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 9868#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 6), 9869#(<= main_~i~1 6), 9870#(<= main_~i~1 7)] [2018-04-13 00:07:29,920 INFO L134 CoverageAnalysis]: Checked inductivity of 5986 backedges. 1466 proven. 102 refuted. 0 times theorem prover too weak. 4418 trivial. 0 not checked. [2018-04-13 00:07:29,920 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-13 00:07:29,920 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-13 00:07:29,920 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=89, Unknown=0, NotChecked=0, Total=132 [2018-04-13 00:07:29,921 INFO L87 Difference]: Start difference. First operand 214 states and 256 transitions. Second operand 12 states. [2018-04-13 00:07:30,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:30,176 INFO L93 Difference]: Finished difference Result 305 states and 387 transitions. [2018-04-13 00:07:30,176 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-04-13 00:07:30,176 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 385 [2018-04-13 00:07:30,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:30,178 INFO L225 Difference]: With dead ends: 305 [2018-04-13 00:07:30,178 INFO L226 Difference]: Without dead ends: 305 [2018-04-13 00:07:30,178 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=113, Invalid=229, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:30,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-04-13 00:07:30,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 223. [2018-04-13 00:07:30,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 223 states. [2018-04-13 00:07:30,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 274 transitions. [2018-04-13 00:07:30,184 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 274 transitions. Word has length 385 [2018-04-13 00:07:30,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:30,184 INFO L459 AbstractCegarLoop]: Abstraction has 223 states and 274 transitions. [2018-04-13 00:07:30,185 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-13 00:07:30,185 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 274 transitions. [2018-04-13 00:07:30,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 392 [2018-04-13 00:07:30,187 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:30,187 INFO L355 BasicCegarLoop]: trace histogram [51, 40, 40, 40, 40, 40, 12, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:30,187 INFO L408 AbstractCegarLoop]: === Iteration 33 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:30,187 INFO L82 PathProgramCache]: Analyzing trace with hash 2006818912, now seen corresponding path program 22 times [2018-04-13 00:07:30,188 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:30,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:30,216 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:30,375 INFO L134 CoverageAnalysis]: Checked inductivity of 6242 backedges. 0 proven. 352 refuted. 0 times theorem prover too weak. 5890 trivial. 0 not checked. [2018-04-13 00:07:30,375 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:30,376 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-13 00:07:30,376 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:30,376 INFO L134 CoverageAnalysis]: Checked inductivity of 876 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 876 trivial. 0 not checked. [2018-04-13 00:07:30,377 INFO L182 omatonBuilderFactory]: Interpolants [10413#true, 10414#false, 10415#(= main_~i~1 0), 10416#(<= main_~i~1 1), 10417#(<= main_~i~1 2), 10418#(<= main_~i~1 3), 10419#(<= main_~i~1 4), 10420#(<= main_~i~1 5), 10421#(<= main_~i~1 6), 10422#(<= main_~i~1 7), 10423#(<= main_~i~1 8), 10424#(<= main_~i~1 9), 10425#(<= main_~i~1 10), 10426#(<= main_~i~1 11)] [2018-04-13 00:07:30,377 INFO L134 CoverageAnalysis]: Checked inductivity of 6242 backedges. 0 proven. 352 refuted. 0 times theorem prover too weak. 5890 trivial. 0 not checked. [2018-04-13 00:07:30,378 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-13 00:07:30,378 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-13 00:07:30,378 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=91, Invalid=91, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:30,379 INFO L87 Difference]: Start difference. First operand 223 states and 274 transitions. Second operand 14 states. [2018-04-13 00:07:30,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:30,520 INFO L93 Difference]: Finished difference Result 357 states and 434 transitions. [2018-04-13 00:07:30,520 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-04-13 00:07:30,520 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 391 [2018-04-13 00:07:30,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:30,522 INFO L225 Difference]: With dead ends: 357 [2018-04-13 00:07:30,522 INFO L226 Difference]: Without dead ends: 357 [2018-04-13 00:07:30,523 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=91, Invalid=91, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:30,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 357 states. [2018-04-13 00:07:30,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 357 to 234. [2018-04-13 00:07:30,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 234 states. [2018-04-13 00:07:30,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 290 transitions. [2018-04-13 00:07:30,530 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 290 transitions. Word has length 391 [2018-04-13 00:07:30,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:30,531 INFO L459 AbstractCegarLoop]: Abstraction has 234 states and 290 transitions. [2018-04-13 00:07:30,531 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-13 00:07:30,531 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 290 transitions. [2018-04-13 00:07:30,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 428 [2018-04-13 00:07:30,533 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:30,534 INFO L355 BasicCegarLoop]: trace histogram [56, 44, 44, 44, 44, 44, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:30,534 INFO L408 AbstractCegarLoop]: === Iteration 34 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:30,534 INFO L82 PathProgramCache]: Analyzing trace with hash 1326020417, now seen corresponding path program 23 times [2018-04-13 00:07:30,535 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:30,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:30,569 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:30,782 INFO L134 CoverageAnalysis]: Checked inductivity of 7548 backedges. 866 proven. 581 refuted. 0 times theorem prover too weak. 6101 trivial. 0 not checked. [2018-04-13 00:07:30,783 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:30,783 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-13 00:07:30,783 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:30,784 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 150 proven. 78 refuted. 0 times theorem prover too weak. 885 trivial. 0 not checked. [2018-04-13 00:07:30,784 INFO L182 omatonBuilderFactory]: Interpolants [11018#true, 11019#false, 11020#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 11021#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 11022#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 11023#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 11024#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 11025#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 4), 11026#(<= main_~i~1 4), 11027#(<= main_~i~1 5), 11028#(<= main_~i~1 6), 11029#(<= main_~i~1 7), 11030#(<= main_~i~1 8)] [2018-04-13 00:07:30,785 INFO L134 CoverageAnalysis]: Checked inductivity of 7548 backedges. 866 proven. 581 refuted. 0 times theorem prover too weak. 6101 trivial. 0 not checked. [2018-04-13 00:07:30,785 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-13 00:07:30,785 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-13 00:07:30,785 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:30,785 INFO L87 Difference]: Start difference. First operand 234 states and 290 transitions. Second operand 13 states. [2018-04-13 00:07:30,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:30,975 INFO L93 Difference]: Finished difference Result 437 states and 597 transitions. [2018-04-13 00:07:30,975 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-04-13 00:07:30,975 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 427 [2018-04-13 00:07:30,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:30,978 INFO L225 Difference]: With dead ends: 437 [2018-04-13 00:07:30,978 INFO L226 Difference]: Without dead ends: 437 [2018-04-13 00:07:30,978 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=83, Invalid=223, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:30,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 437 states. [2018-04-13 00:07:30,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 437 to 234. [2018-04-13 00:07:30,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 234 states. [2018-04-13 00:07:30,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 290 transitions. [2018-04-13 00:07:30,988 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 290 transitions. Word has length 427 [2018-04-13 00:07:30,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:30,988 INFO L459 AbstractCegarLoop]: Abstraction has 234 states and 290 transitions. [2018-04-13 00:07:30,989 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-13 00:07:30,989 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 290 transitions. [2018-04-13 00:07:30,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 434 [2018-04-13 00:07:30,991 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:30,991 INFO L355 BasicCegarLoop]: trace histogram [57, 45, 45, 45, 45, 45, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:30,992 INFO L408 AbstractCegarLoop]: === Iteration 35 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:30,992 INFO L82 PathProgramCache]: Analyzing trace with hash 1293788297, now seen corresponding path program 24 times [2018-04-13 00:07:30,992 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:31,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:31,024 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:31,199 INFO L134 CoverageAnalysis]: Checked inductivity of 7836 backedges. 1153 proven. 530 refuted. 0 times theorem prover too weak. 6153 trivial. 0 not checked. [2018-04-13 00:07:31,199 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:31,199 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-13 00:07:31,199 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:31,199 INFO L134 CoverageAnalysis]: Checked inductivity of 1122 backedges. 173 proven. 64 refuted. 0 times theorem prover too weak. 885 trivial. 0 not checked. [2018-04-13 00:07:31,199 INFO L182 omatonBuilderFactory]: Interpolants [11712#true, 11713#false, 11714#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 11715#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 11716#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 11717#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 11718#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 11719#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 11720#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 5), 11721#(<= main_~i~1 5), 11722#(<= main_~i~1 6), 11723#(<= main_~i~1 7), 11724#(<= main_~i~1 8)] [2018-04-13 00:07:31,200 INFO L134 CoverageAnalysis]: Checked inductivity of 7836 backedges. 1153 proven. 530 refuted. 0 times theorem prover too weak. 6153 trivial. 0 not checked. [2018-04-13 00:07:31,200 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-13 00:07:31,200 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-13 00:07:31,200 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:31,200 INFO L87 Difference]: Start difference. First operand 234 states and 290 transitions. Second operand 13 states. [2018-04-13 00:07:31,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:31,420 INFO L93 Difference]: Finished difference Result 410 states and 555 transitions. [2018-04-13 00:07:31,420 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-04-13 00:07:31,421 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 433 [2018-04-13 00:07:31,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:31,423 INFO L225 Difference]: With dead ends: 410 [2018-04-13 00:07:31,423 INFO L226 Difference]: Without dead ends: 410 [2018-04-13 00:07:31,423 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=98, Invalid=244, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:31,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410 states. [2018-04-13 00:07:31,431 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410 to 234. [2018-04-13 00:07:31,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 234 states. [2018-04-13 00:07:31,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 290 transitions. [2018-04-13 00:07:31,432 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 290 transitions. Word has length 433 [2018-04-13 00:07:31,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:31,433 INFO L459 AbstractCegarLoop]: Abstraction has 234 states and 290 transitions. [2018-04-13 00:07:31,433 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-13 00:07:31,433 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 290 transitions. [2018-04-13 00:07:31,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 440 [2018-04-13 00:07:31,435 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:31,436 INFO L355 BasicCegarLoop]: trace histogram [58, 46, 46, 46, 46, 46, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:31,436 INFO L408 AbstractCegarLoop]: === Iteration 36 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:31,436 INFO L82 PathProgramCache]: Analyzing trace with hash -456174831, now seen corresponding path program 25 times [2018-04-13 00:07:31,437 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:31,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:31,468 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:31,709 INFO L134 CoverageAnalysis]: Checked inductivity of 8130 backedges. 1530 proven. 389 refuted. 0 times theorem prover too weak. 6211 trivial. 0 not checked. [2018-04-13 00:07:31,710 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:31,710 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-13 00:07:31,710 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:31,710 INFO L134 CoverageAnalysis]: Checked inductivity of 1134 backedges. 211 proven. 38 refuted. 0 times theorem prover too weak. 885 trivial. 0 not checked. [2018-04-13 00:07:31,711 INFO L182 omatonBuilderFactory]: Interpolants [12384#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 12385#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 12386#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 12387#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 12388#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 12389#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 12390#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 6), 12391#(<= main_~i~1 6), 12392#(<= main_~i~1 7), 12393#(<= main_~i~1 8), 12381#true, 12382#false, 12383#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0))] [2018-04-13 00:07:31,711 INFO L134 CoverageAnalysis]: Checked inductivity of 8130 backedges. 1530 proven. 389 refuted. 0 times theorem prover too weak. 6211 trivial. 0 not checked. [2018-04-13 00:07:31,711 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-13 00:07:31,712 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-13 00:07:31,712 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:31,712 INFO L87 Difference]: Start difference. First operand 234 states and 290 transitions. Second operand 13 states. [2018-04-13 00:07:31,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:31,908 INFO L93 Difference]: Finished difference Result 375 states and 497 transitions. [2018-04-13 00:07:31,908 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-04-13 00:07:31,908 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 439 [2018-04-13 00:07:31,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:31,910 INFO L225 Difference]: With dead ends: 375 [2018-04-13 00:07:31,910 INFO L226 Difference]: Without dead ends: 375 [2018-04-13 00:07:31,911 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=117, Invalid=263, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:31,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2018-04-13 00:07:31,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 234. [2018-04-13 00:07:31,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 234 states. [2018-04-13 00:07:31,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 290 transitions. [2018-04-13 00:07:31,918 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 290 transitions. Word has length 439 [2018-04-13 00:07:31,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:31,918 INFO L459 AbstractCegarLoop]: Abstraction has 234 states and 290 transitions. [2018-04-13 00:07:31,918 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-13 00:07:31,918 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 290 transitions. [2018-04-13 00:07:31,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 446 [2018-04-13 00:07:31,921 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:31,921 INFO L355 BasicCegarLoop]: trace histogram [59, 47, 47, 47, 47, 47, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:31,921 INFO L408 AbstractCegarLoop]: === Iteration 37 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:31,921 INFO L82 PathProgramCache]: Analyzing trace with hash -1762811175, now seen corresponding path program 26 times [2018-04-13 00:07:31,922 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:31,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:31,951 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:32,147 INFO L134 CoverageAnalysis]: Checked inductivity of 8430 backedges. 2015 proven. 140 refuted. 0 times theorem prover too weak. 6275 trivial. 0 not checked. [2018-04-13 00:07:32,148 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:32,148 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-13 00:07:32,148 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:32,149 INFO L134 CoverageAnalysis]: Checked inductivity of 1140 backedges. 255 proven. 0 refuted. 0 times theorem prover too weak. 885 trivial. 0 not checked. [2018-04-13 00:07:32,149 INFO L182 omatonBuilderFactory]: Interpolants [13024#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 13025#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 13026#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 13027#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 7), 13028#(<= main_~i~1 7), 13029#(<= main_~i~1 8), 13017#true, 13018#false, 13019#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 13020#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 13021#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 13022#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 13023#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4))] [2018-04-13 00:07:32,149 INFO L134 CoverageAnalysis]: Checked inductivity of 8430 backedges. 2015 proven. 140 refuted. 0 times theorem prover too weak. 6275 trivial. 0 not checked. [2018-04-13 00:07:32,149 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-13 00:07:32,150 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-13 00:07:32,150 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=104, Unknown=0, NotChecked=0, Total=156 [2018-04-13 00:07:32,150 INFO L87 Difference]: Start difference. First operand 234 states and 290 transitions. Second operand 13 states. [2018-04-13 00:07:32,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:32,310 INFO L93 Difference]: Finished difference Result 333 states and 443 transitions. [2018-04-13 00:07:32,333 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-13 00:07:32,333 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 445 [2018-04-13 00:07:32,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:32,335 INFO L225 Difference]: With dead ends: 333 [2018-04-13 00:07:32,335 INFO L226 Difference]: Without dead ends: 333 [2018-04-13 00:07:32,335 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=140, Invalid=280, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:32,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2018-04-13 00:07:32,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 243. [2018-04-13 00:07:32,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 243 states. [2018-04-13 00:07:32,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 309 transitions. [2018-04-13 00:07:32,342 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 309 transitions. Word has length 445 [2018-04-13 00:07:32,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:32,342 INFO L459 AbstractCegarLoop]: Abstraction has 243 states and 309 transitions. [2018-04-13 00:07:32,342 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-13 00:07:32,342 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 309 transitions. [2018-04-13 00:07:32,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 452 [2018-04-13 00:07:32,345 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:32,345 INFO L355 BasicCegarLoop]: trace histogram [60, 48, 48, 48, 48, 48, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:32,345 INFO L408 AbstractCegarLoop]: === Iteration 38 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:32,346 INFO L82 PathProgramCache]: Analyzing trace with hash -1871830047, now seen corresponding path program 27 times [2018-04-13 00:07:32,346 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:32,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:32,378 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:32,566 INFO L134 CoverageAnalysis]: Checked inductivity of 8736 backedges. 631 proven. 1006 refuted. 0 times theorem prover too weak. 7099 trivial. 0 not checked. [2018-04-13 00:07:32,566 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:32,566 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-13 00:07:32,567 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:32,567 INFO L134 CoverageAnalysis]: Checked inductivity of 1137 backedges. 63 proven. 162 refuted. 0 times theorem prover too weak. 912 trivial. 0 not checked. [2018-04-13 00:07:32,567 INFO L182 omatonBuilderFactory]: Interpolants [13632#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 13633#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 13634#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 13635#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 4), 13622#true, 13623#false, 13624#(<= 0 main_~i~1), 13625#(<= 1 main_~i~1), 13626#(<= 2 main_~i~1), 13627#(<= 3 main_~i~1), 13628#(<= 4 main_~i~1), 13629#(<= 5 main_~i~1), 13630#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 13631#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:07:32,568 INFO L134 CoverageAnalysis]: Checked inductivity of 8736 backedges. 631 proven. 1006 refuted. 0 times theorem prover too weak. 7099 trivial. 0 not checked. [2018-04-13 00:07:32,568 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-13 00:07:32,568 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-13 00:07:32,568 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=132, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:32,569 INFO L87 Difference]: Start difference. First operand 243 states and 309 transitions. Second operand 14 states. [2018-04-13 00:07:32,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:32,736 INFO L93 Difference]: Finished difference Result 268 states and 322 transitions. [2018-04-13 00:07:32,736 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-04-13 00:07:32,736 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 451 [2018-04-13 00:07:32,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:32,737 INFO L225 Difference]: With dead ends: 268 [2018-04-13 00:07:32,737 INFO L226 Difference]: Without dead ends: 268 [2018-04-13 00:07:32,738 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=90, Invalid=252, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:32,738 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2018-04-13 00:07:32,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 243. [2018-04-13 00:07:32,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 243 states. [2018-04-13 00:07:32,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 302 transitions. [2018-04-13 00:07:32,741 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 302 transitions. Word has length 451 [2018-04-13 00:07:32,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:32,741 INFO L459 AbstractCegarLoop]: Abstraction has 243 states and 302 transitions. [2018-04-13 00:07:32,741 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-13 00:07:32,741 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 302 transitions. [2018-04-13 00:07:32,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 470 [2018-04-13 00:07:32,743 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:32,743 INFO L355 BasicCegarLoop]: trace histogram [63, 51, 51, 51, 51, 51, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:32,743 INFO L408 AbstractCegarLoop]: === Iteration 39 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:32,743 INFO L82 PathProgramCache]: Analyzing trace with hash -872769991, now seen corresponding path program 28 times [2018-04-13 00:07:32,744 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:32,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:32,766 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:32,945 INFO L134 CoverageAnalysis]: Checked inductivity of 9690 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 9270 trivial. 0 not checked. [2018-04-13 00:07:32,945 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:32,945 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-13 00:07:32,946 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:32,946 INFO L134 CoverageAnalysis]: Checked inductivity of 1227 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1227 trivial. 0 not checked. [2018-04-13 00:07:32,947 INFO L182 omatonBuilderFactory]: Interpolants [14157#true, 14158#false, 14159#(= main_~i~1 0), 14160#(<= main_~i~1 1), 14161#(<= main_~i~1 2), 14162#(<= main_~i~1 3), 14163#(<= main_~i~1 4), 14164#(<= main_~i~1 5), 14165#(<= main_~i~1 6), 14166#(<= main_~i~1 7), 14167#(<= main_~i~1 8), 14168#(<= main_~i~1 9), 14169#(<= main_~i~1 10), 14170#(<= main_~i~1 11), 14171#(<= main_~i~1 12)] [2018-04-13 00:07:32,947 INFO L134 CoverageAnalysis]: Checked inductivity of 9690 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 9270 trivial. 0 not checked. [2018-04-13 00:07:32,947 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-13 00:07:32,947 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-13 00:07:32,947 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=105, Invalid=105, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:32,947 INFO L87 Difference]: Start difference. First operand 243 states and 302 transitions. Second operand 15 states. [2018-04-13 00:07:33,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:33,094 INFO L93 Difference]: Finished difference Result 382 states and 466 transitions. [2018-04-13 00:07:33,094 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-04-13 00:07:33,094 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 469 [2018-04-13 00:07:33,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:33,096 INFO L225 Difference]: With dead ends: 382 [2018-04-13 00:07:33,096 INFO L226 Difference]: Without dead ends: 382 [2018-04-13 00:07:33,096 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=105, Invalid=105, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:33,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2018-04-13 00:07:33,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 254. [2018-04-13 00:07:33,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2018-04-13 00:07:33,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 318 transitions. [2018-04-13 00:07:33,100 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 318 transitions. Word has length 469 [2018-04-13 00:07:33,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:33,101 INFO L459 AbstractCegarLoop]: Abstraction has 254 states and 318 transitions. [2018-04-13 00:07:33,101 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-13 00:07:33,101 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 318 transitions. [2018-04-13 00:07:33,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 512 [2018-04-13 00:07:33,103 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:33,103 INFO L355 BasicCegarLoop]: trace histogram [69, 56, 56, 56, 56, 56, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:33,104 INFO L408 AbstractCegarLoop]: === Iteration 40 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:33,104 INFO L82 PathProgramCache]: Analyzing trace with hash -677191454, now seen corresponding path program 29 times [2018-04-13 00:07:33,104 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:33,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:33,127 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:33,307 INFO L134 CoverageAnalysis]: Checked inductivity of 11658 backedges. 1307 proven. 817 refuted. 0 times theorem prover too weak. 9534 trivial. 0 not checked. [2018-04-13 00:07:33,307 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:33,307 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-13 00:07:33,308 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:33,308 INFO L134 CoverageAnalysis]: Checked inductivity of 1533 backedges. 200 proven. 96 refuted. 0 times theorem prover too weak. 1237 trivial. 0 not checked. [2018-04-13 00:07:33,308 INFO L182 omatonBuilderFactory]: Interpolants [14816#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 5), 14817#(<= main_~i~1 5), 14818#(<= main_~i~1 6), 14819#(<= main_~i~1 7), 14820#(<= main_~i~1 8), 14821#(<= main_~i~1 9), 14808#true, 14809#false, 14810#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 14811#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 14812#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 14813#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 14814#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 14815#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5))] [2018-04-13 00:07:33,309 INFO L134 CoverageAnalysis]: Checked inductivity of 11658 backedges. 1307 proven. 817 refuted. 0 times theorem prover too weak. 9534 trivial. 0 not checked. [2018-04-13 00:07:33,309 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-13 00:07:33,309 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-13 00:07:33,309 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=132, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:33,309 INFO L87 Difference]: Start difference. First operand 254 states and 318 transitions. Second operand 14 states. [2018-04-13 00:07:33,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:33,497 INFO L93 Difference]: Finished difference Result 483 states and 670 transitions. [2018-04-13 00:07:33,497 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-04-13 00:07:33,497 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 511 [2018-04-13 00:07:33,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:33,499 INFO L225 Difference]: With dead ends: 483 [2018-04-13 00:07:33,500 INFO L226 Difference]: Without dead ends: 483 [2018-04-13 00:07:33,500 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=104, Invalid=276, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:33,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 483 states. [2018-04-13 00:07:33,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 483 to 254. [2018-04-13 00:07:33,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2018-04-13 00:07:33,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 318 transitions. [2018-04-13 00:07:33,510 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 318 transitions. Word has length 511 [2018-04-13 00:07:33,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:33,511 INFO L459 AbstractCegarLoop]: Abstraction has 254 states and 318 transitions. [2018-04-13 00:07:33,511 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-13 00:07:33,511 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 318 transitions. [2018-04-13 00:07:33,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 518 [2018-04-13 00:07:33,514 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:33,515 INFO L355 BasicCegarLoop]: trace histogram [70, 57, 57, 57, 57, 57, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:33,515 INFO L408 AbstractCegarLoop]: === Iteration 41 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:33,515 INFO L82 PathProgramCache]: Analyzing trace with hash 2088382826, now seen corresponding path program 30 times [2018-04-13 00:07:33,516 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:33,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:33,557 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:33,847 INFO L134 CoverageAnalysis]: Checked inductivity of 12020 backedges. 1708 proven. 720 refuted. 0 times theorem prover too weak. 9592 trivial. 0 not checked. [2018-04-13 00:07:33,848 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:33,848 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-13 00:07:33,848 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:33,848 INFO L134 CoverageAnalysis]: Checked inductivity of 1542 backedges. 229 proven. 76 refuted. 0 times theorem prover too weak. 1237 trivial. 0 not checked. [2018-04-13 00:07:33,848 INFO L182 omatonBuilderFactory]: Interpolants [15584#(<= main_~i~1 9), 15571#true, 15572#false, 15573#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 15574#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 15575#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 15576#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 15577#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 15578#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 15579#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 15580#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 6), 15581#(<= main_~i~1 6), 15582#(<= main_~i~1 7), 15583#(<= main_~i~1 8)] [2018-04-13 00:07:33,849 INFO L134 CoverageAnalysis]: Checked inductivity of 12020 backedges. 1708 proven. 720 refuted. 0 times theorem prover too weak. 9592 trivial. 0 not checked. [2018-04-13 00:07:33,849 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-13 00:07:33,849 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-13 00:07:33,849 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=130, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:33,850 INFO L87 Difference]: Start difference. First operand 254 states and 318 transitions. Second operand 14 states. [2018-04-13 00:07:34,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:34,033 INFO L93 Difference]: Finished difference Result 450 states and 618 transitions. [2018-04-13 00:07:34,034 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-13 00:07:34,034 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 517 [2018-04-13 00:07:34,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:34,036 INFO L225 Difference]: With dead ends: 450 [2018-04-13 00:07:34,036 INFO L226 Difference]: Without dead ends: 450 [2018-04-13 00:07:34,037 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=122, Invalid=298, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:34,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 450 states. [2018-04-13 00:07:34,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 450 to 254. [2018-04-13 00:07:34,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2018-04-13 00:07:34,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 318 transitions. [2018-04-13 00:07:34,043 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 318 transitions. Word has length 517 [2018-04-13 00:07:34,043 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:34,044 INFO L459 AbstractCegarLoop]: Abstraction has 254 states and 318 transitions. [2018-04-13 00:07:34,044 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-13 00:07:34,044 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 318 transitions. [2018-04-13 00:07:34,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 524 [2018-04-13 00:07:34,046 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:34,046 INFO L355 BasicCegarLoop]: trace histogram [71, 58, 58, 58, 58, 58, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:34,046 INFO L408 AbstractCegarLoop]: === Iteration 42 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:34,046 INFO L82 PathProgramCache]: Analyzing trace with hash -1038597326, now seen corresponding path program 31 times [2018-04-13 00:07:34,047 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:34,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:34,073 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:34,280 INFO L134 CoverageAnalysis]: Checked inductivity of 12388 backedges. 2217 proven. 515 refuted. 0 times theorem prover too weak. 9656 trivial. 0 not checked. [2018-04-13 00:07:34,280 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:34,280 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-13 00:07:34,280 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:34,281 INFO L134 CoverageAnalysis]: Checked inductivity of 1554 backedges. 273 proven. 44 refuted. 0 times theorem prover too weak. 1237 trivial. 0 not checked. [2018-04-13 00:07:34,281 INFO L182 omatonBuilderFactory]: Interpolants [16303#true, 16304#false, 16305#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 16306#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 16307#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 16308#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 16309#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 16310#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 16311#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 16312#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 16313#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 7), 16314#(<= main_~i~1 7), 16315#(<= main_~i~1 8), 16316#(<= main_~i~1 9)] [2018-04-13 00:07:34,281 INFO L134 CoverageAnalysis]: Checked inductivity of 12388 backedges. 2217 proven. 515 refuted. 0 times theorem prover too weak. 9656 trivial. 0 not checked. [2018-04-13 00:07:34,281 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-13 00:07:34,281 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-13 00:07:34,281 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=126, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:34,282 INFO L87 Difference]: Start difference. First operand 254 states and 318 transitions. Second operand 14 states. [2018-04-13 00:07:34,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:34,442 INFO L93 Difference]: Finished difference Result 409 states and 550 transitions. [2018-04-13 00:07:34,442 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2018-04-13 00:07:34,442 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 523 [2018-04-13 00:07:34,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:34,444 INFO L225 Difference]: With dead ends: 409 [2018-04-13 00:07:34,444 INFO L226 Difference]: Without dead ends: 409 [2018-04-13 00:07:34,444 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=144, Invalid=318, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:07:34,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 409 states. [2018-04-13 00:07:34,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 409 to 254. [2018-04-13 00:07:34,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2018-04-13 00:07:34,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 318 transitions. [2018-04-13 00:07:34,450 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 318 transitions. Word has length 523 [2018-04-13 00:07:34,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:34,451 INFO L459 AbstractCegarLoop]: Abstraction has 254 states and 318 transitions. [2018-04-13 00:07:34,451 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-13 00:07:34,451 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 318 transitions. [2018-04-13 00:07:34,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 530 [2018-04-13 00:07:34,454 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:34,454 INFO L355 BasicCegarLoop]: trace histogram [72, 59, 59, 59, 59, 59, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:34,454 INFO L408 AbstractCegarLoop]: === Iteration 43 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:34,455 INFO L82 PathProgramCache]: Analyzing trace with hash 857384506, now seen corresponding path program 32 times [2018-04-13 00:07:34,455 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:34,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:34,494 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:34,761 INFO L134 CoverageAnalysis]: Checked inductivity of 12762 backedges. 2852 proven. 184 refuted. 0 times theorem prover too weak. 9726 trivial. 0 not checked. [2018-04-13 00:07:34,761 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:34,761 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-13 00:07:34,761 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:34,761 INFO L134 CoverageAnalysis]: Checked inductivity of 1560 backedges. 323 proven. 0 refuted. 0 times theorem prover too weak. 1237 trivial. 0 not checked. [2018-04-13 00:07:34,762 INFO L182 omatonBuilderFactory]: Interpolants [16996#true, 16997#false, 16998#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 16999#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 17000#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 17001#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 17002#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 17003#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 17004#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 17005#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 17006#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 17007#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 8), 17008#(<= main_~i~1 8), 17009#(<= main_~i~1 9)] [2018-04-13 00:07:34,762 INFO L134 CoverageAnalysis]: Checked inductivity of 12762 backedges. 2852 proven. 184 refuted. 0 times theorem prover too weak. 9726 trivial. 0 not checked. [2018-04-13 00:07:34,762 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-13 00:07:34,762 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-13 00:07:34,763 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=120, Unknown=0, NotChecked=0, Total=182 [2018-04-13 00:07:34,763 INFO L87 Difference]: Start difference. First operand 254 states and 318 transitions. Second operand 14 states. [2018-04-13 00:07:34,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:34,914 INFO L93 Difference]: Finished difference Result 361 states and 487 transitions. [2018-04-13 00:07:34,914 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-04-13 00:07:34,914 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 529 [2018-04-13 00:07:34,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:34,916 INFO L225 Difference]: With dead ends: 361 [2018-04-13 00:07:34,916 INFO L226 Difference]: Without dead ends: 361 [2018-04-13 00:07:34,916 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=170, Invalid=336, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:07:34,917 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2018-04-13 00:07:34,920 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 263. [2018-04-13 00:07:34,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-04-13 00:07:34,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 338 transitions. [2018-04-13 00:07:34,921 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 338 transitions. Word has length 529 [2018-04-13 00:07:34,921 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:34,922 INFO L459 AbstractCegarLoop]: Abstraction has 263 states and 338 transitions. [2018-04-13 00:07:34,922 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-13 00:07:34,922 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 338 transitions. [2018-04-13 00:07:34,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 536 [2018-04-13 00:07:34,924 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:34,924 INFO L355 BasicCegarLoop]: trace histogram [73, 60, 60, 60, 60, 60, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:34,924 INFO L408 AbstractCegarLoop]: === Iteration 44 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:34,924 INFO L82 PathProgramCache]: Analyzing trace with hash 1422482050, now seen corresponding path program 33 times [2018-04-13 00:07:34,925 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:34,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:34,948 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:35,164 INFO L134 CoverageAnalysis]: Checked inductivity of 13142 backedges. 0 proven. 494 refuted. 0 times theorem prover too weak. 12648 trivial. 0 not checked. [2018-04-13 00:07:35,164 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:35,164 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:35,164 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:35,164 INFO L134 CoverageAnalysis]: Checked inductivity of 1557 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1557 trivial. 0 not checked. [2018-04-13 00:07:35,164 INFO L182 omatonBuilderFactory]: Interpolants [17664#(<= main_~i~1 10), 17665#(<= main_~i~1 11), 17666#(<= main_~i~1 12), 17667#(<= main_~i~1 13), 17652#true, 17653#false, 17654#(= main_~i~1 0), 17655#(<= main_~i~1 1), 17656#(<= main_~i~1 2), 17657#(<= main_~i~1 3), 17658#(<= main_~i~1 4), 17659#(<= main_~i~1 5), 17660#(<= main_~i~1 6), 17661#(<= main_~i~1 7), 17662#(<= main_~i~1 8), 17663#(<= main_~i~1 9)] [2018-04-13 00:07:35,165 INFO L134 CoverageAnalysis]: Checked inductivity of 13142 backedges. 0 proven. 494 refuted. 0 times theorem prover too weak. 12648 trivial. 0 not checked. [2018-04-13 00:07:35,165 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:35,165 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:35,165 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=120, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:35,165 INFO L87 Difference]: Start difference. First operand 263 states and 338 transitions. Second operand 16 states. [2018-04-13 00:07:35,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:35,344 INFO L93 Difference]: Finished difference Result 439 states and 572 transitions. [2018-04-13 00:07:35,344 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-04-13 00:07:35,344 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 535 [2018-04-13 00:07:35,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:35,345 INFO L225 Difference]: With dead ends: 439 [2018-04-13 00:07:35,346 INFO L226 Difference]: Without dead ends: 439 [2018-04-13 00:07:35,346 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=120, Invalid=120, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:35,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2018-04-13 00:07:35,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 274. [2018-04-13 00:07:35,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 274 states. [2018-04-13 00:07:35,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 355 transitions. [2018-04-13 00:07:35,353 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 355 transitions. Word has length 535 [2018-04-13 00:07:35,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:35,353 INFO L459 AbstractCegarLoop]: Abstraction has 274 states and 355 transitions. [2018-04-13 00:07:35,353 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:35,354 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 355 transitions. [2018-04-13 00:07:35,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 578 [2018-04-13 00:07:35,357 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:35,357 INFO L355 BasicCegarLoop]: trace histogram [79, 65, 65, 65, 65, 65, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:35,357 INFO L408 AbstractCegarLoop]: === Iteration 45 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:35,358 INFO L82 PathProgramCache]: Analyzing trace with hash -688793877, now seen corresponding path program 34 times [2018-04-13 00:07:35,358 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:35,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:35,398 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:35,649 INFO L134 CoverageAnalysis]: Checked inductivity of 15420 backedges. 1365 proven. 1142 refuted. 0 times theorem prover too weak. 12913 trivial. 0 not checked. [2018-04-13 00:07:35,650 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:35,650 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-13 00:07:35,650 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:35,650 INFO L134 CoverageAnalysis]: Checked inductivity of 1896 backedges. 200 proven. 128 refuted. 0 times theorem prover too weak. 1568 trivial. 0 not checked. [2018-04-13 00:07:35,650 INFO L182 omatonBuilderFactory]: Interpolants [18381#true, 18382#false, 18383#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 18384#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 18385#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 18386#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 18387#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 18388#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 18389#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 5), 18390#(<= main_~i~1 5), 18391#(<= main_~i~1 6), 18392#(<= main_~i~1 7), 18393#(<= main_~i~1 8), 18394#(<= main_~i~1 9), 18395#(<= main_~i~1 10)] [2018-04-13 00:07:35,651 INFO L134 CoverageAnalysis]: Checked inductivity of 15420 backedges. 1365 proven. 1142 refuted. 0 times theorem prover too weak. 12913 trivial. 0 not checked. [2018-04-13 00:07:35,651 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-13 00:07:35,651 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-13 00:07:35,651 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=153, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:35,651 INFO L87 Difference]: Start difference. First operand 274 states and 355 transitions. Second operand 15 states. [2018-04-13 00:07:35,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:35,823 INFO L93 Difference]: Finished difference Result 556 states and 830 transitions. [2018-04-13 00:07:35,823 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-13 00:07:35,823 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 577 [2018-04-13 00:07:35,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:35,826 INFO L225 Difference]: With dead ends: 556 [2018-04-13 00:07:35,826 INFO L226 Difference]: Without dead ends: 556 [2018-04-13 00:07:35,826 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=111, Invalid=309, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:35,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2018-04-13 00:07:35,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 274. [2018-04-13 00:07:35,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 274 states. [2018-04-13 00:07:35,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 355 transitions. [2018-04-13 00:07:35,833 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 355 transitions. Word has length 577 [2018-04-13 00:07:35,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:35,834 INFO L459 AbstractCegarLoop]: Abstraction has 274 states and 355 transitions. [2018-04-13 00:07:35,834 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-13 00:07:35,834 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 355 transitions. [2018-04-13 00:07:35,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 584 [2018-04-13 00:07:35,836 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:35,836 INFO L355 BasicCegarLoop]: trace histogram [80, 66, 66, 66, 66, 66, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:35,836 INFO L408 AbstractCegarLoop]: === Iteration 46 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:35,837 INFO L82 PathProgramCache]: Analyzing trace with hash -1619073677, now seen corresponding path program 35 times [2018-04-13 00:07:35,837 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:35,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:35,864 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:36,075 INFO L134 CoverageAnalysis]: Checked inductivity of 15838 backedges. 1772 proven. 1095 refuted. 0 times theorem prover too weak. 12971 trivial. 0 not checked. [2018-04-13 00:07:36,075 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:36,075 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-13 00:07:36,075 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:36,075 INFO L134 CoverageAnalysis]: Checked inductivity of 1911 backedges. 229 proven. 114 refuted. 0 times theorem prover too weak. 1568 trivial. 0 not checked. [2018-04-13 00:07:36,075 INFO L182 omatonBuilderFactory]: Interpolants [19238#true, 19239#false, 19240#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 19241#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 19242#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 19243#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 19244#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 19245#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 19246#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 19247#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 6), 19248#(<= main_~i~1 6), 19249#(<= main_~i~1 7), 19250#(<= main_~i~1 8), 19251#(<= main_~i~1 9), 19252#(<= main_~i~1 10)] [2018-04-13 00:07:36,076 INFO L134 CoverageAnalysis]: Checked inductivity of 15838 backedges. 1772 proven. 1095 refuted. 0 times theorem prover too weak. 12971 trivial. 0 not checked. [2018-04-13 00:07:36,076 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-13 00:07:36,076 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-13 00:07:36,076 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=152, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:36,076 INFO L87 Difference]: Start difference. First operand 274 states and 355 transitions. Second operand 15 states. [2018-04-13 00:07:36,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:36,299 INFO L93 Difference]: Finished difference Result 529 states and 784 transitions. [2018-04-13 00:07:36,300 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2018-04-13 00:07:36,300 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 583 [2018-04-13 00:07:36,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:36,302 INFO L225 Difference]: With dead ends: 529 [2018-04-13 00:07:36,302 INFO L226 Difference]: Without dead ends: 529 [2018-04-13 00:07:36,303 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 57 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=128, Invalid=334, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:07:36,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2018-04-13 00:07:36,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 274. [2018-04-13 00:07:36,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 274 states. [2018-04-13 00:07:36,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 355 transitions. [2018-04-13 00:07:36,313 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 355 transitions. Word has length 583 [2018-04-13 00:07:36,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:36,313 INFO L459 AbstractCegarLoop]: Abstraction has 274 states and 355 transitions. [2018-04-13 00:07:36,314 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-13 00:07:36,314 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 355 transitions. [2018-04-13 00:07:36,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 590 [2018-04-13 00:07:36,317 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:36,318 INFO L355 BasicCegarLoop]: trace histogram [81, 67, 67, 67, 67, 67, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:36,318 INFO L408 AbstractCegarLoop]: === Iteration 47 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:36,318 INFO L82 PathProgramCache]: Analyzing trace with hash -1912773317, now seen corresponding path program 36 times [2018-04-13 00:07:36,319 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:36,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:36,361 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:36,578 INFO L134 CoverageAnalysis]: Checked inductivity of 16262 backedges. 2287 proven. 940 refuted. 0 times theorem prover too weak. 13035 trivial. 0 not checked. [2018-04-13 00:07:36,578 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:36,578 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-13 00:07:36,578 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:36,578 INFO L134 CoverageAnalysis]: Checked inductivity of 1929 backedges. 273 proven. 88 refuted. 0 times theorem prover too weak. 1568 trivial. 0 not checked. [2018-04-13 00:07:36,579 INFO L182 omatonBuilderFactory]: Interpolants [20070#true, 20071#false, 20072#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 20073#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 20074#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 20075#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 20076#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 20077#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 20078#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 20079#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 20080#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 7), 20081#(<= main_~i~1 7), 20082#(<= main_~i~1 8), 20083#(<= main_~i~1 9), 20084#(<= main_~i~1 10)] [2018-04-13 00:07:36,579 INFO L134 CoverageAnalysis]: Checked inductivity of 16262 backedges. 2287 proven. 940 refuted. 0 times theorem prover too weak. 13035 trivial. 0 not checked. [2018-04-13 00:07:36,579 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-13 00:07:36,579 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-13 00:07:36,579 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:36,580 INFO L87 Difference]: Start difference. First operand 274 states and 355 transitions. Second operand 15 states. [2018-04-13 00:07:36,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:36,818 INFO L93 Difference]: Finished difference Result 490 states and 716 transitions. [2018-04-13 00:07:36,818 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-04-13 00:07:36,818 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 589 [2018-04-13 00:07:36,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:36,821 INFO L225 Difference]: With dead ends: 490 [2018-04-13 00:07:36,822 INFO L226 Difference]: Without dead ends: 490 [2018-04-13 00:07:36,822 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=149, Invalid=357, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:07:36,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 490 states. [2018-04-13 00:07:36,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 490 to 274. [2018-04-13 00:07:36,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 274 states. [2018-04-13 00:07:36,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 355 transitions. [2018-04-13 00:07:36,831 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 355 transitions. Word has length 589 [2018-04-13 00:07:36,831 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:36,831 INFO L459 AbstractCegarLoop]: Abstraction has 274 states and 355 transitions. [2018-04-13 00:07:36,832 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-13 00:07:36,832 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 355 transitions. [2018-04-13 00:07:36,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 596 [2018-04-13 00:07:36,835 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:36,836 INFO L355 BasicCegarLoop]: trace histogram [82, 68, 68, 68, 68, 68, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:36,836 INFO L408 AbstractCegarLoop]: === Iteration 48 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:36,836 INFO L82 PathProgramCache]: Analyzing trace with hash 1734796867, now seen corresponding path program 37 times [2018-04-13 00:07:36,837 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:36,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:36,875 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:37,116 INFO L134 CoverageAnalysis]: Checked inductivity of 16692 backedges. 2928 proven. 659 refuted. 0 times theorem prover too weak. 13105 trivial. 0 not checked. [2018-04-13 00:07:37,116 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:37,116 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-13 00:07:37,116 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:37,116 INFO L134 CoverageAnalysis]: Checked inductivity of 1941 backedges. 323 proven. 50 refuted. 0 times theorem prover too weak. 1568 trivial. 0 not checked. [2018-04-13 00:07:37,117 INFO L182 omatonBuilderFactory]: Interpolants [20865#true, 20866#false, 20867#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 20868#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 20869#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 20870#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 20871#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 20872#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 20873#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 20874#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 20875#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 20876#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 8), 20877#(<= main_~i~1 8), 20878#(<= main_~i~1 9), 20879#(<= main_~i~1 10)] [2018-04-13 00:07:37,117 INFO L134 CoverageAnalysis]: Checked inductivity of 16692 backedges. 2928 proven. 659 refuted. 0 times theorem prover too weak. 13105 trivial. 0 not checked. [2018-04-13 00:07:37,117 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-13 00:07:37,117 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-13 00:07:37,118 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:37,118 INFO L87 Difference]: Start difference. First operand 274 states and 355 transitions. Second operand 15 states. [2018-04-13 00:07:37,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:37,291 INFO L93 Difference]: Finished difference Result 443 states and 630 transitions. [2018-04-13 00:07:37,291 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2018-04-13 00:07:37,291 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 595 [2018-04-13 00:07:37,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:37,293 INFO L225 Difference]: With dead ends: 443 [2018-04-13 00:07:37,293 INFO L226 Difference]: Without dead ends: 443 [2018-04-13 00:07:37,294 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=174, Invalid=378, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:07:37,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 443 states. [2018-04-13 00:07:37,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 443 to 274. [2018-04-13 00:07:37,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 274 states. [2018-04-13 00:07:37,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 355 transitions. [2018-04-13 00:07:37,300 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 355 transitions. Word has length 595 [2018-04-13 00:07:37,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:37,301 INFO L459 AbstractCegarLoop]: Abstraction has 274 states and 355 transitions. [2018-04-13 00:07:37,301 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-13 00:07:37,301 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 355 transitions. [2018-04-13 00:07:37,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 602 [2018-04-13 00:07:37,305 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:37,305 INFO L355 BasicCegarLoop]: trace histogram [83, 69, 69, 69, 69, 69, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:37,306 INFO L408 AbstractCegarLoop]: === Iteration 49 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:37,306 INFO L82 PathProgramCache]: Analyzing trace with hash 1057187979, now seen corresponding path program 38 times [2018-04-13 00:07:37,307 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:37,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:37,350 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:37,633 INFO L134 CoverageAnalysis]: Checked inductivity of 17128 backedges. 3713 proven. 234 refuted. 0 times theorem prover too weak. 13181 trivial. 0 not checked. [2018-04-13 00:07:37,633 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:37,633 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-13 00:07:37,633 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:37,633 INFO L134 CoverageAnalysis]: Checked inductivity of 1947 backedges. 379 proven. 0 refuted. 0 times theorem prover too weak. 1568 trivial. 0 not checked. [2018-04-13 00:07:37,633 INFO L182 omatonBuilderFactory]: Interpolants [21615#true, 21616#false, 21617#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 21618#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 21619#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 21620#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 21621#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 21622#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 21623#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 21624#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 21625#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 21626#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 21627#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 21628#(<= main_~i~1 9), 21629#(<= main_~i~1 10)] [2018-04-13 00:07:37,634 INFO L134 CoverageAnalysis]: Checked inductivity of 17128 backedges. 3713 proven. 234 refuted. 0 times theorem prover too weak. 13181 trivial. 0 not checked. [2018-04-13 00:07:37,634 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-13 00:07:37,634 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-13 00:07:37,634 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=137, Unknown=0, NotChecked=0, Total=210 [2018-04-13 00:07:37,634 INFO L87 Difference]: Start difference. First operand 274 states and 355 transitions. Second operand 15 states. [2018-04-13 00:07:37,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:37,832 INFO L93 Difference]: Finished difference Result 389 states and 549 transitions. [2018-04-13 00:07:37,833 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-04-13 00:07:37,833 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 601 [2018-04-13 00:07:37,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:37,835 INFO L225 Difference]: With dead ends: 389 [2018-04-13 00:07:37,835 INFO L226 Difference]: Without dead ends: 389 [2018-04-13 00:07:37,835 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 72 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=203, Invalid=397, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:07:37,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 389 states. [2018-04-13 00:07:37,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 389 to 283. [2018-04-13 00:07:37,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 283 states. [2018-04-13 00:07:37,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 376 transitions. [2018-04-13 00:07:37,839 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 376 transitions. Word has length 601 [2018-04-13 00:07:37,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:37,840 INFO L459 AbstractCegarLoop]: Abstraction has 283 states and 376 transitions. [2018-04-13 00:07:37,840 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-13 00:07:37,840 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 376 transitions. [2018-04-13 00:07:37,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 608 [2018-04-13 00:07:37,842 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:37,843 INFO L355 BasicCegarLoop]: trace histogram [84, 70, 70, 70, 70, 70, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:37,843 INFO L408 AbstractCegarLoop]: === Iteration 50 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:37,843 INFO L82 PathProgramCache]: Analyzing trace with hash 141646867, now seen corresponding path program 39 times [2018-04-13 00:07:37,843 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:37,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:37,868 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:38,186 INFO L134 CoverageAnalysis]: Checked inductivity of 17570 backedges. 990 proven. 1775 refuted. 0 times theorem prover too weak. 14805 trivial. 0 not checked. [2018-04-13 00:07:38,186 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:38,186 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:38,186 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:38,187 INFO L134 CoverageAnalysis]: Checked inductivity of 1944 backedges. 95 proven. 230 refuted. 0 times theorem prover too weak. 1619 trivial. 0 not checked. [2018-04-13 00:07:38,187 INFO L182 omatonBuilderFactory]: Interpolants [22336#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 22337#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 5), 22322#true, 22323#false, 22324#(<= 0 main_~i~1), 22325#(<= 1 main_~i~1), 22326#(<= 2 main_~i~1), 22327#(<= 3 main_~i~1), 22328#(<= 4 main_~i~1), 22329#(<= 5 main_~i~1), 22330#(<= 6 main_~i~1), 22331#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 22332#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 22333#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 22334#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 22335#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4))] [2018-04-13 00:07:38,187 INFO L134 CoverageAnalysis]: Checked inductivity of 17570 backedges. 990 proven. 1775 refuted. 0 times theorem prover too weak. 14805 trivial. 0 not checked. [2018-04-13 00:07:38,187 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:38,188 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:38,188 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=175, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:38,188 INFO L87 Difference]: Start difference. First operand 283 states and 376 transitions. Second operand 16 states. [2018-04-13 00:07:38,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:38,358 INFO L93 Difference]: Finished difference Result 313 states and 392 transitions. [2018-04-13 00:07:38,358 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-13 00:07:38,359 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 607 [2018-04-13 00:07:38,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:38,360 INFO L225 Difference]: With dead ends: 313 [2018-04-13 00:07:38,360 INFO L226 Difference]: Without dead ends: 313 [2018-04-13 00:07:38,363 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=119, Invalid=343, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:07:38,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-04-13 00:07:38,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 283. [2018-04-13 00:07:38,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 283 states. [2018-04-13 00:07:38,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 368 transitions. [2018-04-13 00:07:38,366 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 368 transitions. Word has length 607 [2018-04-13 00:07:38,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:38,367 INFO L459 AbstractCegarLoop]: Abstraction has 283 states and 368 transitions. [2018-04-13 00:07:38,367 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:38,367 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 368 transitions. [2018-04-13 00:07:38,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 626 [2018-04-13 00:07:38,371 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:38,371 INFO L355 BasicCegarLoop]: trace histogram [87, 73, 73, 73, 73, 73, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:38,371 INFO L408 AbstractCegarLoop]: === Iteration 51 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:38,371 INFO L82 PathProgramCache]: Analyzing trace with hash -1552314325, now seen corresponding path program 40 times [2018-04-13 00:07:38,372 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:38,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:38,408 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:38,674 INFO L134 CoverageAnalysis]: Checked inductivity of 18932 backedges. 0 proven. 574 refuted. 0 times theorem prover too weak. 18358 trivial. 0 not checked. [2018-04-13 00:07:38,674 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:38,674 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-13 00:07:38,674 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:38,674 INFO L134 CoverageAnalysis]: Checked inductivity of 2052 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2052 trivial. 0 not checked. [2018-04-13 00:07:38,674 INFO L182 omatonBuilderFactory]: Interpolants [22946#true, 22947#false, 22948#(= main_~i~1 0), 22949#(<= main_~i~1 1), 22950#(<= main_~i~1 2), 22951#(<= main_~i~1 3), 22952#(<= main_~i~1 4), 22953#(<= main_~i~1 5), 22954#(<= main_~i~1 6), 22955#(<= main_~i~1 7), 22956#(<= main_~i~1 8), 22957#(<= main_~i~1 9), 22958#(<= main_~i~1 10), 22959#(<= main_~i~1 11), 22960#(<= main_~i~1 12), 22961#(<= main_~i~1 13), 22962#(<= main_~i~1 14)] [2018-04-13 00:07:38,675 INFO L134 CoverageAnalysis]: Checked inductivity of 18932 backedges. 0 proven. 574 refuted. 0 times theorem prover too weak. 18358 trivial. 0 not checked. [2018-04-13 00:07:38,675 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-13 00:07:38,675 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-13 00:07:38,675 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=136, Invalid=136, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:38,675 INFO L87 Difference]: Start difference. First operand 283 states and 368 transitions. Second operand 17 states. [2018-04-13 00:07:38,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:38,788 INFO L93 Difference]: Finished difference Result 464 states and 606 transitions. [2018-04-13 00:07:38,788 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-04-13 00:07:38,788 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 625 [2018-04-13 00:07:38,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:38,790 INFO L225 Difference]: With dead ends: 464 [2018-04-13 00:07:38,790 INFO L226 Difference]: Without dead ends: 464 [2018-04-13 00:07:38,790 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=136, Invalid=136, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:38,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2018-04-13 00:07:38,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 294. [2018-04-13 00:07:38,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294 states. [2018-04-13 00:07:38,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 385 transitions. [2018-04-13 00:07:38,795 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 385 transitions. Word has length 625 [2018-04-13 00:07:38,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:38,795 INFO L459 AbstractCegarLoop]: Abstraction has 294 states and 385 transitions. [2018-04-13 00:07:38,795 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-13 00:07:38,795 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 385 transitions. [2018-04-13 00:07:38,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 674 [2018-04-13 00:07:38,798 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:38,798 INFO L355 BasicCegarLoop]: trace histogram [94, 79, 79, 79, 79, 79, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:38,798 INFO L408 AbstractCegarLoop]: === Iteration 52 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:38,798 INFO L82 PathProgramCache]: Analyzing trace with hash -971505124, now seen corresponding path program 41 times [2018-04-13 00:07:38,798 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:38,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:38,821 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:39,056 INFO L134 CoverageAnalysis]: Checked inductivity of 22146 backedges. 1950 proven. 1514 refuted. 0 times theorem prover too weak. 18682 trivial. 0 not checked. [2018-04-13 00:07:39,057 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:39,057 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:39,057 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:39,057 INFO L134 CoverageAnalysis]: Checked inductivity of 2472 backedges. 256 proven. 152 refuted. 0 times theorem prover too weak. 2064 trivial. 0 not checked. [2018-04-13 00:07:39,057 INFO L182 omatonBuilderFactory]: Interpolants [23721#true, 23722#false, 23723#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 23724#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 23725#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 23726#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 23727#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 23728#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 23729#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 23730#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 6), 23731#(<= main_~i~1 6), 23732#(<= main_~i~1 7), 23733#(<= main_~i~1 8), 23734#(<= main_~i~1 9), 23735#(<= main_~i~1 10), 23736#(<= main_~i~1 11)] [2018-04-13 00:07:39,058 INFO L134 CoverageAnalysis]: Checked inductivity of 22146 backedges. 1950 proven. 1514 refuted. 0 times theorem prover too weak. 18682 trivial. 0 not checked. [2018-04-13 00:07:39,058 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:39,058 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:39,058 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=175, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:39,059 INFO L87 Difference]: Start difference. First operand 294 states and 385 transitions. Second operand 16 states. [2018-04-13 00:07:39,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:39,227 INFO L93 Difference]: Finished difference Result 608 states and 923 transitions. [2018-04-13 00:07:39,227 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-04-13 00:07:39,227 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 673 [2018-04-13 00:07:39,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:39,230 INFO L225 Difference]: With dead ends: 608 [2018-04-13 00:07:39,230 INFO L226 Difference]: Without dead ends: 608 [2018-04-13 00:07:39,230 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=135, Invalid=371, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:07:39,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 608 states. [2018-04-13 00:07:39,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 608 to 294. [2018-04-13 00:07:39,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294 states. [2018-04-13 00:07:39,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 385 transitions. [2018-04-13 00:07:39,238 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 385 transitions. Word has length 673 [2018-04-13 00:07:39,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:39,239 INFO L459 AbstractCegarLoop]: Abstraction has 294 states and 385 transitions. [2018-04-13 00:07:39,239 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:39,239 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 385 transitions. [2018-04-13 00:07:39,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 680 [2018-04-13 00:07:39,243 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:39,244 INFO L355 BasicCegarLoop]: trace histogram [95, 80, 80, 80, 80, 80, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:39,244 INFO L408 AbstractCegarLoop]: === Iteration 53 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:39,244 INFO L82 PathProgramCache]: Analyzing trace with hash -2105112604, now seen corresponding path program 42 times [2018-04-13 00:07:39,244 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:39,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:39,269 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:39,513 INFO L134 CoverageAnalysis]: Checked inductivity of 22650 backedges. 2489 proven. 1415 refuted. 0 times theorem prover too weak. 18746 trivial. 0 not checked. [2018-04-13 00:07:39,514 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:39,514 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:39,514 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:39,514 INFO L134 CoverageAnalysis]: Checked inductivity of 2487 backedges. 291 proven. 132 refuted. 0 times theorem prover too weak. 2064 trivial. 0 not checked. [2018-04-13 00:07:39,514 INFO L182 omatonBuilderFactory]: Interpolants [24653#true, 24654#false, 24655#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 24656#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 24657#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 24658#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 24659#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 24660#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 24661#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 24662#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 24663#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 7), 24664#(<= main_~i~1 7), 24665#(<= main_~i~1 8), 24666#(<= main_~i~1 9), 24667#(<= main_~i~1 10), 24668#(<= main_~i~1 11)] [2018-04-13 00:07:39,515 INFO L134 CoverageAnalysis]: Checked inductivity of 22650 backedges. 2489 proven. 1415 refuted. 0 times theorem prover too weak. 18746 trivial. 0 not checked. [2018-04-13 00:07:39,515 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:39,515 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:39,515 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=173, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:39,515 INFO L87 Difference]: Start difference. First operand 294 states and 385 transitions. Second operand 16 states. [2018-04-13 00:07:39,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:39,707 INFO L93 Difference]: Finished difference Result 575 states and 866 transitions. [2018-04-13 00:07:39,707 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2018-04-13 00:07:39,707 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 679 [2018-04-13 00:07:39,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:39,709 INFO L225 Difference]: With dead ends: 575 [2018-04-13 00:07:39,709 INFO L226 Difference]: Without dead ends: 575 [2018-04-13 00:07:39,709 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=155, Invalid=397, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:07:39,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 575 states. [2018-04-13 00:07:39,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 575 to 294. [2018-04-13 00:07:39,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294 states. [2018-04-13 00:07:39,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 385 transitions. [2018-04-13 00:07:39,714 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 385 transitions. Word has length 679 [2018-04-13 00:07:39,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:39,715 INFO L459 AbstractCegarLoop]: Abstraction has 294 states and 385 transitions. [2018-04-13 00:07:39,715 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:39,715 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 385 transitions. [2018-04-13 00:07:39,717 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 686 [2018-04-13 00:07:39,717 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:39,717 INFO L355 BasicCegarLoop]: trace histogram [96, 81, 81, 81, 81, 81, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:39,717 INFO L408 AbstractCegarLoop]: === Iteration 54 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:39,718 INFO L82 PathProgramCache]: Analyzing trace with hash -887206164, now seen corresponding path program 43 times [2018-04-13 00:07:39,718 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:39,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:39,740 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:40,049 INFO L134 CoverageAnalysis]: Checked inductivity of 23160 backedges. 3154 proven. 1190 refuted. 0 times theorem prover too weak. 18816 trivial. 0 not checked. [2018-04-13 00:07:40,050 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:40,050 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:40,050 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:40,050 INFO L134 CoverageAnalysis]: Checked inductivity of 2505 backedges. 341 proven. 100 refuted. 0 times theorem prover too weak. 2064 trivial. 0 not checked. [2018-04-13 00:07:40,050 INFO L182 omatonBuilderFactory]: Interpolants [25568#(<= main_~i~1 10), 25569#(<= main_~i~1 11), 25554#true, 25555#false, 25556#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 25557#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 25558#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 25559#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 25560#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 25561#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 25562#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 25563#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 25564#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 25565#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 8), 25566#(<= main_~i~1 8), 25567#(<= main_~i~1 9)] [2018-04-13 00:07:40,051 INFO L134 CoverageAnalysis]: Checked inductivity of 23160 backedges. 3154 proven. 1190 refuted. 0 times theorem prover too weak. 18816 trivial. 0 not checked. [2018-04-13 00:07:40,051 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:40,051 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:40,051 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=169, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:40,051 INFO L87 Difference]: Start difference. First operand 294 states and 385 transitions. Second operand 16 states. [2018-04-13 00:07:40,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:40,262 INFO L93 Difference]: Finished difference Result 530 states and 787 transitions. [2018-04-13 00:07:40,263 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-04-13 00:07:40,263 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 685 [2018-04-13 00:07:40,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:40,265 INFO L225 Difference]: With dead ends: 530 [2018-04-13 00:07:40,266 INFO L226 Difference]: Without dead ends: 530 [2018-04-13 00:07:40,266 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 76 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=179, Invalid=421, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:07:40,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2018-04-13 00:07:40,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 294. [2018-04-13 00:07:40,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294 states. [2018-04-13 00:07:40,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 385 transitions. [2018-04-13 00:07:40,272 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 385 transitions. Word has length 685 [2018-04-13 00:07:40,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:40,273 INFO L459 AbstractCegarLoop]: Abstraction has 294 states and 385 transitions. [2018-04-13 00:07:40,273 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:40,273 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 385 transitions. [2018-04-13 00:07:40,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 692 [2018-04-13 00:07:40,276 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:40,276 INFO L355 BasicCegarLoop]: trace histogram [97, 82, 82, 82, 82, 82, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:40,276 INFO L408 AbstractCegarLoop]: === Iteration 55 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:40,276 INFO L82 PathProgramCache]: Analyzing trace with hash -1895344332, now seen corresponding path program 44 times [2018-04-13 00:07:40,277 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:40,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:40,306 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:40,532 INFO L134 CoverageAnalysis]: Checked inductivity of 23676 backedges. 3963 proven. 821 refuted. 0 times theorem prover too weak. 18892 trivial. 0 not checked. [2018-04-13 00:07:40,533 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:40,533 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:40,533 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:40,533 INFO L134 CoverageAnalysis]: Checked inductivity of 2517 backedges. 397 proven. 56 refuted. 0 times theorem prover too weak. 2064 trivial. 0 not checked. [2018-04-13 00:07:40,533 INFO L182 omatonBuilderFactory]: Interpolants [26412#true, 26413#false, 26414#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 26415#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 26416#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 26417#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 26418#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 26419#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 26420#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 26421#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 26422#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 26423#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 26424#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 26425#(<= main_~i~1 9), 26426#(<= main_~i~1 10), 26427#(<= main_~i~1 11)] [2018-04-13 00:07:40,534 INFO L134 CoverageAnalysis]: Checked inductivity of 23676 backedges. 3963 proven. 821 refuted. 0 times theorem prover too weak. 18892 trivial. 0 not checked. [2018-04-13 00:07:40,534 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:40,534 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:40,535 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=163, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:40,535 INFO L87 Difference]: Start difference. First operand 294 states and 385 transitions. Second operand 16 states. [2018-04-13 00:07:40,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:40,728 INFO L93 Difference]: Finished difference Result 477 states and 689 transitions. [2018-04-13 00:07:40,728 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-04-13 00:07:40,728 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 691 [2018-04-13 00:07:40,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:40,730 INFO L225 Difference]: With dead ends: 477 [2018-04-13 00:07:40,730 INFO L226 Difference]: Without dead ends: 477 [2018-04-13 00:07:40,730 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 81 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=207, Invalid=443, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:07:40,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 477 states. [2018-04-13 00:07:40,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 477 to 294. [2018-04-13 00:07:40,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294 states. [2018-04-13 00:07:40,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 385 transitions. [2018-04-13 00:07:40,739 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 385 transitions. Word has length 691 [2018-04-13 00:07:40,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:40,739 INFO L459 AbstractCegarLoop]: Abstraction has 294 states and 385 transitions. [2018-04-13 00:07:40,739 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:40,739 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 385 transitions. [2018-04-13 00:07:40,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 698 [2018-04-13 00:07:40,742 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:40,742 INFO L355 BasicCegarLoop]: trace histogram [98, 83, 83, 83, 83, 83, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:40,742 INFO L408 AbstractCegarLoop]: === Iteration 56 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:40,742 INFO L82 PathProgramCache]: Analyzing trace with hash 80744636, now seen corresponding path program 45 times [2018-04-13 00:07:40,743 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:40,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:40,767 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:41,084 INFO L134 CoverageAnalysis]: Checked inductivity of 24198 backedges. 4934 proven. 290 refuted. 0 times theorem prover too weak. 18974 trivial. 0 not checked. [2018-04-13 00:07:41,084 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:41,084 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-13 00:07:41,084 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:41,085 INFO L134 CoverageAnalysis]: Checked inductivity of 2523 backedges. 459 proven. 0 refuted. 0 times theorem prover too weak. 2064 trivial. 0 not checked. [2018-04-13 00:07:41,085 INFO L182 omatonBuilderFactory]: Interpolants [27232#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 27233#(<= main_~i~1 10), 27234#(<= main_~i~1 11), 27219#true, 27220#false, 27221#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 27222#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 27223#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 27224#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 27225#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 27226#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 27227#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 27228#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 27229#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 27230#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 27231#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10))] [2018-04-13 00:07:41,085 INFO L134 CoverageAnalysis]: Checked inductivity of 24198 backedges. 4934 proven. 290 refuted. 0 times theorem prover too weak. 18974 trivial. 0 not checked. [2018-04-13 00:07:41,085 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-13 00:07:41,086 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-13 00:07:41,086 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=85, Invalid=155, Unknown=0, NotChecked=0, Total=240 [2018-04-13 00:07:41,086 INFO L87 Difference]: Start difference. First operand 294 states and 385 transitions. Second operand 16 states. [2018-04-13 00:07:41,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:41,288 INFO L93 Difference]: Finished difference Result 417 states and 597 transitions. [2018-04-13 00:07:41,288 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2018-04-13 00:07:41,288 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 697 [2018-04-13 00:07:41,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:41,290 INFO L225 Difference]: With dead ends: 417 [2018-04-13 00:07:41,290 INFO L226 Difference]: Without dead ends: 417 [2018-04-13 00:07:41,290 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 85 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=239, Invalid=463, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:07:41,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 417 states. [2018-04-13 00:07:41,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 417 to 303. [2018-04-13 00:07:41,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 303 states. [2018-04-13 00:07:41,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 407 transitions. [2018-04-13 00:07:41,296 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 407 transitions. Word has length 697 [2018-04-13 00:07:41,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:41,297 INFO L459 AbstractCegarLoop]: Abstraction has 303 states and 407 transitions. [2018-04-13 00:07:41,297 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-13 00:07:41,297 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 407 transitions. [2018-04-13 00:07:41,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 704 [2018-04-13 00:07:41,300 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:41,300 INFO L355 BasicCegarLoop]: trace histogram [99, 84, 84, 84, 84, 84, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:41,300 INFO L408 AbstractCegarLoop]: === Iteration 57 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:41,300 INFO L82 PathProgramCache]: Analyzing trace with hash 2083609476, now seen corresponding path program 46 times [2018-04-13 00:07:41,301 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:41,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:41,325 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:41,542 INFO L134 CoverageAnalysis]: Checked inductivity of 24726 backedges. 0 proven. 660 refuted. 0 times theorem prover too weak. 24066 trivial. 0 not checked. [2018-04-13 00:07:41,543 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:41,543 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-13 00:07:41,543 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:41,543 INFO L134 CoverageAnalysis]: Checked inductivity of 2520 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2520 trivial. 0 not checked. [2018-04-13 00:07:41,543 INFO L182 omatonBuilderFactory]: Interpolants [27977#true, 27978#false, 27979#(= main_~i~1 0), 27980#(<= main_~i~1 1), 27981#(<= main_~i~1 2), 27982#(<= main_~i~1 3), 27983#(<= main_~i~1 4), 27984#(<= main_~i~1 5), 27985#(<= main_~i~1 6), 27986#(<= main_~i~1 7), 27987#(<= main_~i~1 8), 27988#(<= main_~i~1 9), 27989#(<= main_~i~1 10), 27990#(<= main_~i~1 11), 27991#(<= main_~i~1 12), 27992#(<= main_~i~1 13), 27993#(<= main_~i~1 14), 27994#(<= main_~i~1 15)] [2018-04-13 00:07:41,544 INFO L134 CoverageAnalysis]: Checked inductivity of 24726 backedges. 0 proven. 660 refuted. 0 times theorem prover too weak. 24066 trivial. 0 not checked. [2018-04-13 00:07:41,544 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-13 00:07:41,544 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-13 00:07:41,544 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=153, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:41,545 INFO L87 Difference]: Start difference. First operand 303 states and 407 transitions. Second operand 18 states. [2018-04-13 00:07:41,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:41,713 INFO L93 Difference]: Finished difference Result 527 states and 737 transitions. [2018-04-13 00:07:41,713 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-04-13 00:07:41,713 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 703 [2018-04-13 00:07:41,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:41,716 INFO L225 Difference]: With dead ends: 527 [2018-04-13 00:07:41,716 INFO L226 Difference]: Without dead ends: 527 [2018-04-13 00:07:41,717 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=153, Invalid=153, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:41,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 527 states. [2018-04-13 00:07:41,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 527 to 314. [2018-04-13 00:07:41,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 314 states. [2018-04-13 00:07:41,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 425 transitions. [2018-04-13 00:07:41,725 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 425 transitions. Word has length 703 [2018-04-13 00:07:41,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:41,726 INFO L459 AbstractCegarLoop]: Abstraction has 314 states and 425 transitions. [2018-04-13 00:07:41,726 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-13 00:07:41,726 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 425 transitions. [2018-04-13 00:07:41,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 752 [2018-04-13 00:07:41,731 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:41,731 INFO L355 BasicCegarLoop]: trace histogram [106, 90, 90, 90, 90, 90, 17, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:41,731 INFO L408 AbstractCegarLoop]: === Iteration 58 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:41,732 INFO L82 PathProgramCache]: Analyzing trace with hash -1951724619, now seen corresponding path program 47 times [2018-04-13 00:07:41,732 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:41,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:41,780 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:42,186 INFO L134 CoverageAnalysis]: Checked inductivity of 28382 backedges. 1469 proven. 2632 refuted. 0 times theorem prover too weak. 24281 trivial. 0 not checked. [2018-04-13 00:07:42,187 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:42,187 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-13 00:07:42,187 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:42,187 INFO L134 CoverageAnalysis]: Checked inductivity of 2979 backedges. 133 proven. 313 refuted. 0 times theorem prover too weak. 2533 trivial. 0 not checked. [2018-04-13 00:07:42,187 INFO L182 omatonBuilderFactory]: Interpolants [28836#true, 28837#false, 28838#(<= 0 main_~i~1), 28839#(<= 1 main_~i~1), 28840#(<= 2 main_~i~1), 28841#(<= 3 main_~i~1), 28842#(<= 4 main_~i~1), 28843#(<= 5 main_~i~1), 28844#(<= 6 main_~i~1), 28845#(<= 7 main_~i~1), 28846#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 28847#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 28848#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 28849#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 28850#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 28851#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 28852#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 28853#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 6)] [2018-04-13 00:07:42,188 INFO L134 CoverageAnalysis]: Checked inductivity of 28382 backedges. 1469 proven. 2632 refuted. 0 times theorem prover too weak. 24281 trivial. 0 not checked. [2018-04-13 00:07:42,188 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-13 00:07:42,188 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-13 00:07:42,188 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=82, Invalid=224, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:42,189 INFO L87 Difference]: Start difference. First operand 314 states and 425 transitions. Second operand 18 states. [2018-04-13 00:07:42,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:42,547 INFO L93 Difference]: Finished difference Result 349 states and 444 transitions. [2018-04-13 00:07:42,547 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2018-04-13 00:07:42,547 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 751 [2018-04-13 00:07:42,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:42,548 INFO L225 Difference]: With dead ends: 349 [2018-04-13 00:07:42,548 INFO L226 Difference]: Without dead ends: 349 [2018-04-13 00:07:42,548 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=152, Invalid=448, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:07:42,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2018-04-13 00:07:42,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 314. [2018-04-13 00:07:42,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 314 states. [2018-04-13 00:07:42,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 416 transitions. [2018-04-13 00:07:42,552 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 416 transitions. Word has length 751 [2018-04-13 00:07:42,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:42,552 INFO L459 AbstractCegarLoop]: Abstraction has 314 states and 416 transitions. [2018-04-13 00:07:42,552 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-13 00:07:42,552 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 416 transitions. [2018-04-13 00:07:42,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 776 [2018-04-13 00:07:42,555 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:42,556 INFO L355 BasicCegarLoop]: trace histogram [110, 94, 94, 94, 94, 94, 17, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:42,556 INFO L408 AbstractCegarLoop]: === Iteration 59 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:42,556 INFO L82 PathProgramCache]: Analyzing trace with hash -234595499, now seen corresponding path program 48 times [2018-04-13 00:07:42,556 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:42,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:42,583 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:42,836 INFO L134 CoverageAnalysis]: Checked inductivity of 30706 backedges. 0 proven. 752 refuted. 0 times theorem prover too weak. 29954 trivial. 0 not checked. [2018-04-13 00:07:42,836 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:42,836 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-13 00:07:42,836 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:42,837 INFO L134 CoverageAnalysis]: Checked inductivity of 3135 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3135 trivial. 0 not checked. [2018-04-13 00:07:42,837 INFO L182 omatonBuilderFactory]: Interpolants [29536#(<= main_~i~1 3), 29537#(<= main_~i~1 4), 29538#(<= main_~i~1 5), 29539#(<= main_~i~1 6), 29540#(<= main_~i~1 7), 29541#(<= main_~i~1 8), 29542#(<= main_~i~1 9), 29543#(<= main_~i~1 10), 29544#(<= main_~i~1 11), 29545#(<= main_~i~1 12), 29546#(<= main_~i~1 13), 29547#(<= main_~i~1 14), 29548#(<= main_~i~1 15), 29549#(<= main_~i~1 16), 29531#true, 29532#false, 29533#(= main_~i~1 0), 29534#(<= main_~i~1 1), 29535#(<= main_~i~1 2)] [2018-04-13 00:07:42,837 INFO L134 CoverageAnalysis]: Checked inductivity of 30706 backedges. 0 proven. 752 refuted. 0 times theorem prover too weak. 29954 trivial. 0 not checked. [2018-04-13 00:07:42,837 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-13 00:07:42,838 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-13 00:07:42,838 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=171, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:42,838 INFO L87 Difference]: Start difference. First operand 314 states and 416 transitions. Second operand 19 states. [2018-04-13 00:07:43,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:43,025 INFO L93 Difference]: Finished difference Result 505 states and 662 transitions. [2018-04-13 00:07:43,025 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-04-13 00:07:43,026 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 775 [2018-04-13 00:07:43,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:43,028 INFO L225 Difference]: With dead ends: 505 [2018-04-13 00:07:43,028 INFO L226 Difference]: Without dead ends: 505 [2018-04-13 00:07:43,028 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=171, Invalid=171, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:43,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 505 states. [2018-04-13 00:07:43,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 505 to 325. [2018-04-13 00:07:43,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 325 states. [2018-04-13 00:07:43,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 325 states to 325 states and 433 transitions. [2018-04-13 00:07:43,034 INFO L78 Accepts]: Start accepts. Automaton has 325 states and 433 transitions. Word has length 775 [2018-04-13 00:07:43,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:43,035 INFO L459 AbstractCegarLoop]: Abstraction has 325 states and 433 transitions. [2018-04-13 00:07:43,035 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-13 00:07:43,035 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 433 transitions. [2018-04-13 00:07:43,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 830 [2018-04-13 00:07:43,041 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:43,042 INFO L355 BasicCegarLoop]: trace histogram [118, 101, 101, 101, 101, 101, 18, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:43,042 INFO L408 AbstractCegarLoop]: === Iteration 60 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:43,042 INFO L82 PathProgramCache]: Analyzing trace with hash -1205015410, now seen corresponding path program 49 times [2018-04-13 00:07:43,043 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:43,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:43,093 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:43,408 INFO L134 CoverageAnalysis]: Checked inductivity of 35400 backedges. 6618 proven. 352 refuted. 0 times theorem prover too weak. 28430 trivial. 0 not checked. [2018-04-13 00:07:43,408 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:43,408 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-13 00:07:43,408 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:43,409 INFO L134 CoverageAnalysis]: Checked inductivity of 3690 backedges. 562 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2018-04-13 00:07:43,409 INFO L182 omatonBuilderFactory]: Interpolants [30380#true, 30381#false, 30382#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 30383#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 30384#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 30385#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 30386#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 30387#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 30388#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 30389#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 30390#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 30391#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 30392#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 30393#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 30394#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 30395#(<= main_~i~1 11), 30396#(<= main_~i~1 12)] [2018-04-13 00:07:43,410 INFO L134 CoverageAnalysis]: Checked inductivity of 35400 backedges. 6618 proven. 352 refuted. 0 times theorem prover too weak. 28430 trivial. 0 not checked. [2018-04-13 00:07:43,410 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-13 00:07:43,410 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-13 00:07:43,410 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=98, Invalid=174, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:43,410 INFO L87 Difference]: Start difference. First operand 325 states and 433 transitions. Second operand 17 states. [2018-04-13 00:07:43,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:43,644 INFO L93 Difference]: Finished difference Result 464 states and 679 transitions. [2018-04-13 00:07:43,644 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2018-04-13 00:07:43,644 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 829 [2018-04-13 00:07:43,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:43,646 INFO L225 Difference]: With dead ends: 464 [2018-04-13 00:07:43,646 INFO L226 Difference]: Without dead ends: 464 [2018-04-13 00:07:43,647 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=278, Invalid=534, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:07:43,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2018-04-13 00:07:43,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 331. [2018-04-13 00:07:43,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 331 states. [2018-04-13 00:07:43,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 440 transitions. [2018-04-13 00:07:43,652 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 440 transitions. Word has length 829 [2018-04-13 00:07:43,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:43,652 INFO L459 AbstractCegarLoop]: Abstraction has 331 states and 440 transitions. [2018-04-13 00:07:43,652 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-13 00:07:43,652 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 440 transitions. [2018-04-13 00:07:43,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 836 [2018-04-13 00:07:43,656 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:43,656 INFO L355 BasicCegarLoop]: trace histogram [119, 102, 102, 102, 102, 102, 18, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:43,657 INFO L408 AbstractCegarLoop]: === Iteration 61 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:43,657 INFO L82 PathProgramCache]: Analyzing trace with hash -1810198058, now seen corresponding path program 50 times [2018-04-13 00:07:43,657 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:43,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:43,687 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:44,128 INFO L134 CoverageAnalysis]: Checked inductivity of 36040 backedges. 7190 proven. 420 refuted. 0 times theorem prover too weak. 28430 trivial. 0 not checked. [2018-04-13 00:07:44,129 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:44,129 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-13 00:07:44,129 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:44,129 INFO L134 CoverageAnalysis]: Checked inductivity of 3690 backedges. 562 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2018-04-13 00:07:44,130 INFO L182 omatonBuilderFactory]: Interpolants [31232#(<= main_~i~1 12), 31233#(<= main_~i~1 13), 31216#true, 31217#false, 31218#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 31219#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 31220#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 31221#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 31222#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 31223#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 31224#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 31225#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 31226#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 31227#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 31228#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 31229#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 31230#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 31231#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12)] [2018-04-13 00:07:44,130 INFO L134 CoverageAnalysis]: Checked inductivity of 36040 backedges. 7190 proven. 420 refuted. 0 times theorem prover too weak. 28430 trivial. 0 not checked. [2018-04-13 00:07:44,131 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-13 00:07:44,131 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-13 00:07:44,131 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=194, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:44,131 INFO L87 Difference]: Start difference. First operand 331 states and 440 transitions. Second operand 18 states. [2018-04-13 00:07:44,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:44,366 INFO L93 Difference]: Finished difference Result 473 states and 717 transitions. [2018-04-13 00:07:44,366 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2018-04-13 00:07:44,366 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 835 [2018-04-13 00:07:44,367 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:44,368 INFO L225 Difference]: With dead ends: 473 [2018-04-13 00:07:44,368 INFO L226 Difference]: Without dead ends: 473 [2018-04-13 00:07:44,369 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 114 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=320, Invalid=610, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:07:44,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 473 states. [2018-04-13 00:07:44,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 473 to 337. [2018-04-13 00:07:44,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 337 states. [2018-04-13 00:07:44,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 447 transitions. [2018-04-13 00:07:44,375 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 447 transitions. Word has length 835 [2018-04-13 00:07:44,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:44,376 INFO L459 AbstractCegarLoop]: Abstraction has 337 states and 447 transitions. [2018-04-13 00:07:44,376 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-13 00:07:44,376 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 447 transitions. [2018-04-13 00:07:44,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 842 [2018-04-13 00:07:44,382 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:44,382 INFO L355 BasicCegarLoop]: trace histogram [120, 103, 103, 103, 103, 103, 18, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:44,383 INFO L408 AbstractCegarLoop]: === Iteration 62 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:44,383 INFO L82 PathProgramCache]: Analyzing trace with hash 1329144094, now seen corresponding path program 51 times [2018-04-13 00:07:44,383 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:44,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:44,413 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:44,697 INFO L134 CoverageAnalysis]: Checked inductivity of 36686 backedges. 0 proven. 850 refuted. 0 times theorem prover too weak. 35836 trivial. 0 not checked. [2018-04-13 00:07:44,697 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:44,698 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:07:44,698 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:44,698 INFO L134 CoverageAnalysis]: Checked inductivity of 3690 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3690 trivial. 0 not checked. [2018-04-13 00:07:44,698 INFO L182 omatonBuilderFactory]: Interpolants [32070#true, 32071#false, 32072#(= main_~i~1 0), 32073#(<= main_~i~1 1), 32074#(<= main_~i~1 2), 32075#(<= main_~i~1 3), 32076#(<= main_~i~1 4), 32077#(<= main_~i~1 5), 32078#(<= main_~i~1 6), 32079#(<= main_~i~1 7), 32080#(<= main_~i~1 8), 32081#(<= main_~i~1 9), 32082#(<= main_~i~1 10), 32083#(<= main_~i~1 11), 32084#(<= main_~i~1 12), 32085#(<= main_~i~1 13), 32086#(<= main_~i~1 14), 32087#(<= main_~i~1 15), 32088#(<= main_~i~1 16), 32089#(<= main_~i~1 17)] [2018-04-13 00:07:44,699 INFO L134 CoverageAnalysis]: Checked inductivity of 36686 backedges. 0 proven. 850 refuted. 0 times theorem prover too weak. 35836 trivial. 0 not checked. [2018-04-13 00:07:44,699 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:07:44,699 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:07:44,699 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=190, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:44,699 INFO L87 Difference]: Start difference. First operand 337 states and 447 transitions. Second operand 20 states. [2018-04-13 00:07:44,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:44,887 INFO L93 Difference]: Finished difference Result 533 states and 697 transitions. [2018-04-13 00:07:44,887 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-04-13 00:07:44,887 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 841 [2018-04-13 00:07:44,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:44,889 INFO L225 Difference]: With dead ends: 533 [2018-04-13 00:07:44,889 INFO L226 Difference]: Without dead ends: 533 [2018-04-13 00:07:44,889 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=190, Invalid=190, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:44,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 533 states. [2018-04-13 00:07:44,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 533 to 348. [2018-04-13 00:07:44,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 348 states. [2018-04-13 00:07:44,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 464 transitions. [2018-04-13 00:07:44,894 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 464 transitions. Word has length 841 [2018-04-13 00:07:44,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:44,895 INFO L459 AbstractCegarLoop]: Abstraction has 348 states and 464 transitions. [2018-04-13 00:07:44,895 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:07:44,895 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 464 transitions. [2018-04-13 00:07:44,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 896 [2018-04-13 00:07:44,899 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:44,899 INFO L355 BasicCegarLoop]: trace histogram [128, 110, 110, 110, 110, 110, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:44,900 INFO L408 AbstractCegarLoop]: === Iteration 63 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:44,900 INFO L82 PathProgramCache]: Analyzing trace with hash 1888354327, now seen corresponding path program 52 times [2018-04-13 00:07:44,900 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:44,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:44,935 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:45,327 INFO L134 CoverageAnalysis]: Checked inductivity of 41802 backedges. 5960 proven. 1125 refuted. 0 times theorem prover too weak. 34717 trivial. 0 not checked. [2018-04-13 00:07:45,327 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:45,327 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-13 00:07:45,327 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:45,327 INFO L134 CoverageAnalysis]: Checked inductivity of 4293 backedges. 544 proven. 62 refuted. 0 times theorem prover too weak. 3687 trivial. 0 not checked. [2018-04-13 00:07:45,327 INFO L182 omatonBuilderFactory]: Interpolants [32971#true, 32972#false, 32973#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 32974#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 32975#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 32976#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 32977#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 32978#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 32979#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 32980#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 32981#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 32982#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 32983#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 32984#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 32985#(<= main_~i~1 10), 32986#(<= main_~i~1 11), 32987#(<= main_~i~1 12)] [2018-04-13 00:07:45,328 INFO L134 CoverageAnalysis]: Checked inductivity of 41802 backedges. 5960 proven. 1125 refuted. 0 times theorem prover too weak. 34717 trivial. 0 not checked. [2018-04-13 00:07:45,328 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-13 00:07:45,328 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-13 00:07:45,329 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=89, Invalid=183, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:45,329 INFO L87 Difference]: Start difference. First operand 348 states and 464 transitions. Second operand 17 states. [2018-04-13 00:07:45,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:45,557 INFO L93 Difference]: Finished difference Result 572 states and 890 transitions. [2018-04-13 00:07:45,557 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2018-04-13 00:07:45,557 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 895 [2018-04-13 00:07:45,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:45,560 INFO L225 Difference]: With dead ends: 572 [2018-04-13 00:07:45,560 INFO L226 Difference]: Without dead ends: 572 [2018-04-13 00:07:45,560 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 95 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=243, Invalid=513, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:07:45,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 572 states. [2018-04-13 00:07:45,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 572 to 348. [2018-04-13 00:07:45,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 348 states. [2018-04-13 00:07:45,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 464 transitions. [2018-04-13 00:07:45,567 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 464 transitions. Word has length 895 [2018-04-13 00:07:45,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:45,567 INFO L459 AbstractCegarLoop]: Abstraction has 348 states and 464 transitions. [2018-04-13 00:07:45,567 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-13 00:07:45,567 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 464 transitions. [2018-04-13 00:07:45,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 902 [2018-04-13 00:07:45,571 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:45,572 INFO L355 BasicCegarLoop]: trace histogram [129, 111, 111, 111, 111, 111, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:45,572 INFO L408 AbstractCegarLoop]: === Iteration 64 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:45,572 INFO L82 PathProgramCache]: Analyzing trace with hash 904827743, now seen corresponding path program 53 times [2018-04-13 00:07:45,572 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:45,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:45,604 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:45,943 INFO L134 CoverageAnalysis]: Checked inductivity of 42498 backedges. 6514 proven. 1267 refuted. 0 times theorem prover too weak. 34717 trivial. 0 not checked. [2018-04-13 00:07:45,943 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:45,944 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-13 00:07:45,944 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:45,944 INFO L134 CoverageAnalysis]: Checked inductivity of 4299 backedges. 544 proven. 68 refuted. 0 times theorem prover too weak. 3687 trivial. 0 not checked. [2018-04-13 00:07:45,945 INFO L182 omatonBuilderFactory]: Interpolants [33930#true, 33931#false, 33932#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 33933#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 33934#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 33935#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 33936#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 33937#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 33938#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 33939#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 33940#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 33941#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 33942#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 33943#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 33944#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 33945#(<= main_~i~1 11), 33946#(<= main_~i~1 12), 33947#(<= main_~i~1 13)] [2018-04-13 00:07:45,946 INFO L134 CoverageAnalysis]: Checked inductivity of 42498 backedges. 6514 proven. 1267 refuted. 0 times theorem prover too weak. 34717 trivial. 0 not checked. [2018-04-13 00:07:45,946 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-13 00:07:45,946 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-13 00:07:45,947 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=204, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:45,947 INFO L87 Difference]: Start difference. First operand 348 states and 464 transitions. Second operand 18 states. [2018-04-13 00:07:46,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:46,224 INFO L93 Difference]: Finished difference Result 575 states and 937 transitions. [2018-04-13 00:07:46,224 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-04-13 00:07:46,224 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 901 [2018-04-13 00:07:46,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:46,226 INFO L225 Difference]: With dead ends: 575 [2018-04-13 00:07:46,226 INFO L226 Difference]: Without dead ends: 575 [2018-04-13 00:07:46,227 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=282, Invalid=588, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:07:46,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 575 states. [2018-04-13 00:07:46,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 575 to 348. [2018-04-13 00:07:46,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 348 states. [2018-04-13 00:07:46,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 464 transitions. [2018-04-13 00:07:46,236 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 464 transitions. Word has length 901 [2018-04-13 00:07:46,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:46,237 INFO L459 AbstractCegarLoop]: Abstraction has 348 states and 464 transitions. [2018-04-13 00:07:46,237 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-13 00:07:46,237 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 464 transitions. [2018-04-13 00:07:46,247 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 908 [2018-04-13 00:07:46,247 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:46,247 INFO L355 BasicCegarLoop]: trace histogram [130, 112, 112, 112, 112, 112, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:46,248 INFO L408 AbstractCegarLoop]: === Iteration 65 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:46,248 INFO L82 PathProgramCache]: Analyzing trace with hash -2011852633, now seen corresponding path program 54 times [2018-04-13 00:07:46,248 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:46,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:46,372 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:46,746 INFO L134 CoverageAnalysis]: Checked inductivity of 43200 backedges. 7068 proven. 1415 refuted. 0 times theorem prover too weak. 34717 trivial. 0 not checked. [2018-04-13 00:07:46,746 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:46,746 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-13 00:07:46,746 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:46,747 INFO L134 CoverageAnalysis]: Checked inductivity of 4305 backedges. 544 proven. 74 refuted. 0 times theorem prover too weak. 3687 trivial. 0 not checked. [2018-04-13 00:07:46,747 INFO L182 omatonBuilderFactory]: Interpolants [34912#(<= main_~i~1 13), 34913#(<= main_~i~1 14), 34895#true, 34896#false, 34897#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 34898#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 34899#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 34900#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 34901#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 34902#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 34903#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 34904#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 34905#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 34906#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 34907#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 34908#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 34909#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 34910#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 34911#(<= main_~i~1 12)] [2018-04-13 00:07:46,748 INFO L134 CoverageAnalysis]: Checked inductivity of 43200 backedges. 7068 proven. 1415 refuted. 0 times theorem prover too weak. 34717 trivial. 0 not checked. [2018-04-13 00:07:46,748 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-13 00:07:46,748 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-13 00:07:46,748 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=226, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:46,748 INFO L87 Difference]: Start difference. First operand 348 states and 464 transitions. Second operand 19 states. [2018-04-13 00:07:46,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:46,976 INFO L93 Difference]: Finished difference Result 579 states and 941 transitions. [2018-04-13 00:07:46,976 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-04-13 00:07:46,976 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 907 [2018-04-13 00:07:46,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:46,979 INFO L225 Difference]: With dead ends: 579 [2018-04-13 00:07:46,979 INFO L226 Difference]: Without dead ends: 579 [2018-04-13 00:07:46,979 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 126 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=324, Invalid=668, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:07:46,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 579 states. [2018-04-13 00:07:46,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 579 to 345. [2018-04-13 00:07:46,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 345 states. [2018-04-13 00:07:46,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 446 transitions. [2018-04-13 00:07:46,984 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 446 transitions. Word has length 907 [2018-04-13 00:07:46,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:46,985 INFO L459 AbstractCegarLoop]: Abstraction has 345 states and 446 transitions. [2018-04-13 00:07:46,985 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-13 00:07:46,985 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 446 transitions. [2018-04-13 00:07:46,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 914 [2018-04-13 00:07:46,989 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:46,989 INFO L355 BasicCegarLoop]: trace histogram [131, 113, 113, 113, 113, 113, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:46,989 INFO L408 AbstractCegarLoop]: === Iteration 66 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:46,989 INFO L82 PathProgramCache]: Analyzing trace with hash -1895073809, now seen corresponding path program 55 times [2018-04-13 00:07:46,990 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:47,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:47,020 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:47,405 INFO L134 CoverageAnalysis]: Checked inductivity of 43908 backedges. 8597 proven. 494 refuted. 0 times theorem prover too weak. 34817 trivial. 0 not checked. [2018-04-13 00:07:47,405 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:47,405 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-13 00:07:47,406 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:47,406 INFO L134 CoverageAnalysis]: Checked inductivity of 4314 backedges. 627 proven. 0 refuted. 0 times theorem prover too weak. 3687 trivial. 0 not checked. [2018-04-13 00:07:47,406 INFO L182 omatonBuilderFactory]: Interpolants [35872#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 35873#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 35874#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 35875#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 35876#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 35877#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 35878#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 35879#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 35880#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 35881#(<= main_~i~1 13), 35882#(<= main_~i~1 14), 35864#true, 35865#false, 35866#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 35867#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 35868#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 35869#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 35870#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 35871#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5))] [2018-04-13 00:07:47,407 INFO L134 CoverageAnalysis]: Checked inductivity of 43908 backedges. 8597 proven. 494 refuted. 0 times theorem prover too weak. 34817 trivial. 0 not checked. [2018-04-13 00:07:47,407 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-13 00:07:47,407 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-13 00:07:47,407 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=215, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:47,407 INFO L87 Difference]: Start difference. First operand 345 states and 446 transitions. Second operand 19 states. [2018-04-13 00:07:47,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:47,614 INFO L93 Difference]: Finished difference Result 501 states and 791 transitions. [2018-04-13 00:07:47,614 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2018-04-13 00:07:47,614 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 913 [2018-04-13 00:07:47,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:47,616 INFO L225 Difference]: With dead ends: 501 [2018-04-13 00:07:47,616 INFO L226 Difference]: Without dead ends: 501 [2018-04-13 00:07:47,616 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 130 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=365, Invalid=691, Unknown=0, NotChecked=0, Total=1056 [2018-04-13 00:07:47,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 501 states. [2018-04-13 00:07:47,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 501 to 354. [2018-04-13 00:07:47,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 354 states. [2018-04-13 00:07:47,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 354 states to 354 states and 471 transitions. [2018-04-13 00:07:47,621 INFO L78 Accepts]: Start accepts. Automaton has 354 states and 471 transitions. Word has length 913 [2018-04-13 00:07:47,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:47,621 INFO L459 AbstractCegarLoop]: Abstraction has 354 states and 471 transitions. [2018-04-13 00:07:47,621 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-13 00:07:47,621 INFO L276 IsEmpty]: Start isEmpty. Operand 354 states and 471 transitions. [2018-04-13 00:07:47,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 920 [2018-04-13 00:07:47,626 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:47,626 INFO L355 BasicCegarLoop]: trace histogram [132, 114, 114, 114, 114, 114, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:47,626 INFO L408 AbstractCegarLoop]: === Iteration 67 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:47,627 INFO L82 PathProgramCache]: Analyzing trace with hash 1507938423, now seen corresponding path program 56 times [2018-04-13 00:07:47,627 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:47,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:47,657 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:47,991 INFO L134 CoverageAnalysis]: Checked inductivity of 44622 backedges. 2086 proven. 3787 refuted. 0 times theorem prover too weak. 38749 trivial. 0 not checked. [2018-04-13 00:07:47,991 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:47,992 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:07:47,992 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:47,992 INFO L134 CoverageAnalysis]: Checked inductivity of 4311 backedges. 177 proven. 411 refuted. 0 times theorem prover too weak. 3723 trivial. 0 not checked. [2018-04-13 00:07:47,992 INFO L182 omatonBuilderFactory]: Interpolants [36768#(<= 0 main_~i~1), 36769#(<= 1 main_~i~1), 36770#(<= 2 main_~i~1), 36771#(<= 3 main_~i~1), 36772#(<= 4 main_~i~1), 36773#(<= 5 main_~i~1), 36774#(<= 6 main_~i~1), 36775#(<= 7 main_~i~1), 36776#(<= 8 main_~i~1), 36777#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 36778#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 36779#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 36780#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 36781#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 36782#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 36783#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 36784#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 36785#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 7), 36766#true, 36767#false] [2018-04-13 00:07:47,993 INFO L134 CoverageAnalysis]: Checked inductivity of 44622 backedges. 2086 proven. 3787 refuted. 0 times theorem prover too weak. 38749 trivial. 0 not checked. [2018-04-13 00:07:47,993 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:07:47,993 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:07:47,994 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=279, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:47,994 INFO L87 Difference]: Start difference. First operand 354 states and 471 transitions. Second operand 20 states. [2018-04-13 00:07:48,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:48,371 INFO L93 Difference]: Finished difference Result 394 states and 493 transitions. [2018-04-13 00:07:48,371 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2018-04-13 00:07:48,371 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 919 [2018-04-13 00:07:48,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:48,373 INFO L225 Difference]: With dead ends: 394 [2018-04-13 00:07:48,373 INFO L226 Difference]: Without dead ends: 394 [2018-04-13 00:07:48,373 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 171 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=189, Invalid=567, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:07:48,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2018-04-13 00:07:48,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 354. [2018-04-13 00:07:48,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 354 states. [2018-04-13 00:07:48,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 354 states to 354 states and 461 transitions. [2018-04-13 00:07:48,377 INFO L78 Accepts]: Start accepts. Automaton has 354 states and 461 transitions. Word has length 919 [2018-04-13 00:07:48,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:48,377 INFO L459 AbstractCegarLoop]: Abstraction has 354 states and 461 transitions. [2018-04-13 00:07:48,377 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:07:48,377 INFO L276 IsEmpty]: Start isEmpty. Operand 354 states and 461 transitions. [2018-04-13 00:07:48,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 956 [2018-04-13 00:07:48,381 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:48,382 INFO L355 BasicCegarLoop]: trace histogram [138, 120, 120, 120, 120, 120, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:48,382 INFO L408 AbstractCegarLoop]: === Iteration 68 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:48,382 INFO L82 PathProgramCache]: Analyzing trace with hash -1331307801, now seen corresponding path program 57 times [2018-04-13 00:07:48,383 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:48,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:48,419 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:48,808 INFO L134 CoverageAnalysis]: Checked inductivity of 49032 backedges. 0 proven. 954 refuted. 0 times theorem prover too weak. 48078 trivial. 0 not checked. [2018-04-13 00:07:48,809 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:48,809 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:07:48,809 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:48,809 INFO L134 CoverageAnalysis]: Checked inductivity of 4545 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4545 trivial. 0 not checked. [2018-04-13 00:07:48,810 INFO L182 omatonBuilderFactory]: Interpolants [37568#(<= main_~i~1 16), 37569#(<= main_~i~1 17), 37570#(<= main_~i~1 18), 37550#true, 37551#false, 37552#(= main_~i~1 0), 37553#(<= main_~i~1 1), 37554#(<= main_~i~1 2), 37555#(<= main_~i~1 3), 37556#(<= main_~i~1 4), 37557#(<= main_~i~1 5), 37558#(<= main_~i~1 6), 37559#(<= main_~i~1 7), 37560#(<= main_~i~1 8), 37561#(<= main_~i~1 9), 37562#(<= main_~i~1 10), 37563#(<= main_~i~1 11), 37564#(<= main_~i~1 12), 37565#(<= main_~i~1 13), 37566#(<= main_~i~1 14), 37567#(<= main_~i~1 15)] [2018-04-13 00:07:48,810 INFO L134 CoverageAnalysis]: Checked inductivity of 49032 backedges. 0 proven. 954 refuted. 0 times theorem prover too weak. 48078 trivial. 0 not checked. [2018-04-13 00:07:48,811 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:07:48,811 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:07:48,811 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=210, Invalid=210, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:48,811 INFO L87 Difference]: Start difference. First operand 354 states and 461 transitions. Second operand 21 states. [2018-04-13 00:07:48,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:48,951 INFO L93 Difference]: Finished difference Result 523 states and 649 transitions. [2018-04-13 00:07:48,951 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-13 00:07:48,952 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 955 [2018-04-13 00:07:48,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:48,954 INFO L225 Difference]: With dead ends: 523 [2018-04-13 00:07:48,954 INFO L226 Difference]: Without dead ends: 523 [2018-04-13 00:07:48,954 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=210, Invalid=210, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:48,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 523 states. [2018-04-13 00:07:48,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 523 to 365. [2018-04-13 00:07:48,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 365 states. [2018-04-13 00:07:48,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 477 transitions. [2018-04-13 00:07:48,959 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 477 transitions. Word has length 955 [2018-04-13 00:07:48,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:48,959 INFO L459 AbstractCegarLoop]: Abstraction has 365 states and 477 transitions. [2018-04-13 00:07:48,959 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:07:48,959 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 477 transitions. [2018-04-13 00:07:48,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1016 [2018-04-13 00:07:48,965 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:48,965 INFO L355 BasicCegarLoop]: trace histogram [147, 128, 128, 128, 128, 128, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:48,965 INFO L408 AbstractCegarLoop]: === Iteration 69 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:48,965 INFO L82 PathProgramCache]: Analyzing trace with hash -1086056216, now seen corresponding path program 58 times [2018-04-13 00:07:48,966 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:49,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:49,007 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:49,434 INFO L134 CoverageAnalysis]: Checked inductivity of 55722 backedges. 5786 proven. 1806 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:49,434 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:49,434 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-13 00:07:49,434 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:49,435 INFO L134 CoverageAnalysis]: Checked inductivity of 5256 backedges. 574 proven. 112 refuted. 0 times theorem prover too weak. 4570 trivial. 0 not checked. [2018-04-13 00:07:49,435 INFO L182 omatonBuilderFactory]: Interpolants [38464#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 38465#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 38466#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 38467#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 38468#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 38469#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 38470#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 38471#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 38472#(<= main_~i~1 9), 38473#(<= main_~i~1 10), 38474#(<= main_~i~1 11), 38475#(<= main_~i~1 12), 38459#true, 38460#false, 38461#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 38462#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 38463#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:07:49,436 INFO L134 CoverageAnalysis]: Checked inductivity of 55722 backedges. 5786 proven. 1806 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:49,436 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-13 00:07:49,436 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-13 00:07:49,437 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=82, Invalid=190, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:49,437 INFO L87 Difference]: Start difference. First operand 365 states and 477 transitions. Second operand 17 states. [2018-04-13 00:07:49,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:49,621 INFO L93 Difference]: Finished difference Result 684 states and 1059 transitions. [2018-04-13 00:07:49,621 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2018-04-13 00:07:49,621 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 1015 [2018-04-13 00:07:49,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:49,626 INFO L225 Difference]: With dead ends: 684 [2018-04-13 00:07:49,626 INFO L226 Difference]: Without dead ends: 684 [2018-04-13 00:07:49,627 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 90 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=212, Invalid=490, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:07:49,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 684 states. [2018-04-13 00:07:49,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 684 to 365. [2018-04-13 00:07:49,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 365 states. [2018-04-13 00:07:49,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 477 transitions. [2018-04-13 00:07:49,635 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 477 transitions. Word has length 1015 [2018-04-13 00:07:49,636 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:49,636 INFO L459 AbstractCegarLoop]: Abstraction has 365 states and 477 transitions. [2018-04-13 00:07:49,636 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-13 00:07:49,636 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 477 transitions. [2018-04-13 00:07:49,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1022 [2018-04-13 00:07:49,641 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:49,641 INFO L355 BasicCegarLoop]: trace histogram [148, 129, 129, 129, 129, 129, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:49,641 INFO L408 AbstractCegarLoop]: === Iteration 70 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:49,642 INFO L82 PathProgramCache]: Analyzing trace with hash -616958928, now seen corresponding path program 59 times [2018-04-13 00:07:49,642 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:49,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:49,683 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:50,105 INFO L134 CoverageAnalysis]: Checked inductivity of 56528 backedges. 6370 proven. 2028 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:50,105 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:50,105 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-13 00:07:50,105 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:50,106 INFO L134 CoverageAnalysis]: Checked inductivity of 5268 backedges. 574 proven. 124 refuted. 0 times theorem prover too weak. 4570 trivial. 0 not checked. [2018-04-13 00:07:50,106 INFO L182 omatonBuilderFactory]: Interpolants [39552#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 39553#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 39554#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 39555#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 39556#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 39557#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 39558#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 39559#(<= main_~i~1 10), 39560#(<= main_~i~1 11), 39561#(<= main_~i~1 12), 39562#(<= main_~i~1 13), 39545#true, 39546#false, 39547#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 39548#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 39549#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 39550#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 39551#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4))] [2018-04-13 00:07:50,107 INFO L134 CoverageAnalysis]: Checked inductivity of 56528 backedges. 6370 proven. 2028 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:50,107 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-13 00:07:50,107 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-13 00:07:50,107 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=212, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:50,108 INFO L87 Difference]: Start difference. First operand 365 states and 477 transitions. Second operand 18 states. [2018-04-13 00:07:50,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:50,329 INFO L93 Difference]: Finished difference Result 687 states and 1122 transitions. [2018-04-13 00:07:50,330 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2018-04-13 00:07:50,330 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 1021 [2018-04-13 00:07:50,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:50,333 INFO L225 Difference]: With dead ends: 687 [2018-04-13 00:07:50,333 INFO L226 Difference]: Without dead ends: 687 [2018-04-13 00:07:50,334 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=248, Invalid=564, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:07:50,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 687 states. [2018-04-13 00:07:50,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 687 to 365. [2018-04-13 00:07:50,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 365 states. [2018-04-13 00:07:50,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 477 transitions. [2018-04-13 00:07:50,341 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 477 transitions. Word has length 1021 [2018-04-13 00:07:50,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:50,341 INFO L459 AbstractCegarLoop]: Abstraction has 365 states and 477 transitions. [2018-04-13 00:07:50,341 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-13 00:07:50,341 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 477 transitions. [2018-04-13 00:07:50,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1028 [2018-04-13 00:07:50,347 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:50,347 INFO L355 BasicCegarLoop]: trace histogram [149, 130, 130, 130, 130, 130, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:50,347 INFO L408 AbstractCegarLoop]: === Iteration 71 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:50,347 INFO L82 PathProgramCache]: Analyzing trace with hash 1088436600, now seen corresponding path program 60 times [2018-04-13 00:07:50,348 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:50,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:50,399 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:50,847 INFO L134 CoverageAnalysis]: Checked inductivity of 57340 backedges. 6954 proven. 2256 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:50,847 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:50,847 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-13 00:07:50,847 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:50,848 INFO L134 CoverageAnalysis]: Checked inductivity of 5280 backedges. 574 proven. 136 refuted. 0 times theorem prover too weak. 4570 trivial. 0 not checked. [2018-04-13 00:07:50,848 INFO L182 omatonBuilderFactory]: Interpolants [40640#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 40641#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 40642#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 40643#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 40644#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 40645#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 40646#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 40647#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 40648#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 40649#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 40650#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 40651#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 40652#(<= main_~i~1 11), 40653#(<= main_~i~1 12), 40654#(<= main_~i~1 13), 40655#(<= main_~i~1 14), 40637#true, 40638#false, 40639#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0))] [2018-04-13 00:07:50,849 INFO L134 CoverageAnalysis]: Checked inductivity of 57340 backedges. 6954 proven. 2256 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:50,849 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-13 00:07:50,849 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-13 00:07:50,849 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=235, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:50,850 INFO L87 Difference]: Start difference. First operand 365 states and 477 transitions. Second operand 19 states. [2018-04-13 00:07:51,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:51,102 INFO L93 Difference]: Finished difference Result 690 states and 1185 transitions. [2018-04-13 00:07:51,102 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2018-04-13 00:07:51,102 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 1027 [2018-04-13 00:07:51,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:51,107 INFO L225 Difference]: With dead ends: 690 [2018-04-13 00:07:51,107 INFO L226 Difference]: Without dead ends: 690 [2018-04-13 00:07:51,107 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 121 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=287, Invalid=643, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:07:51,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 690 states. [2018-04-13 00:07:51,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 690 to 365. [2018-04-13 00:07:51,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 365 states. [2018-04-13 00:07:51,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 477 transitions. [2018-04-13 00:07:51,116 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 477 transitions. Word has length 1027 [2018-04-13 00:07:51,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:51,116 INFO L459 AbstractCegarLoop]: Abstraction has 365 states and 477 transitions. [2018-04-13 00:07:51,116 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-13 00:07:51,116 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 477 transitions. [2018-04-13 00:07:51,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1034 [2018-04-13 00:07:51,123 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:51,123 INFO L355 BasicCegarLoop]: trace histogram [150, 131, 131, 131, 131, 131, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:51,123 INFO L408 AbstractCegarLoop]: === Iteration 72 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:51,123 INFO L82 PathProgramCache]: Analyzing trace with hash 1086286016, now seen corresponding path program 61 times [2018-04-13 00:07:51,123 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:51,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:51,164 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:51,630 INFO L134 CoverageAnalysis]: Checked inductivity of 58158 backedges. 7538 proven. 2490 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:51,631 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:51,631 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:07:51,631 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:51,631 INFO L134 CoverageAnalysis]: Checked inductivity of 5292 backedges. 574 proven. 148 refuted. 0 times theorem prover too weak. 4570 trivial. 0 not checked. [2018-04-13 00:07:51,631 INFO L182 omatonBuilderFactory]: Interpolants [41735#true, 41736#false, 41737#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 41738#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 41739#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 41740#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 41741#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 41742#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 41743#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 41744#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 41745#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 41746#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 41747#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 41748#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 41749#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 41750#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 41751#(<= main_~i~1 12), 41752#(<= main_~i~1 13), 41753#(<= main_~i~1 14), 41754#(<= main_~i~1 15)] [2018-04-13 00:07:51,633 INFO L134 CoverageAnalysis]: Checked inductivity of 58158 backedges. 7538 proven. 2490 refuted. 0 times theorem prover too weak. 48130 trivial. 0 not checked. [2018-04-13 00:07:51,633 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:07:51,633 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:07:51,633 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=259, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:51,633 INFO L87 Difference]: Start difference. First operand 365 states and 477 transitions. Second operand 20 states. [2018-04-13 00:07:51,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:51,894 INFO L93 Difference]: Finished difference Result 690 states and 1185 transitions. [2018-04-13 00:07:51,894 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2018-04-13 00:07:51,894 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1033 [2018-04-13 00:07:51,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:51,898 INFO L225 Difference]: With dead ends: 690 [2018-04-13 00:07:51,899 INFO L226 Difference]: Without dead ends: 690 [2018-04-13 00:07:51,899 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 138 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=329, Invalid=727, Unknown=0, NotChecked=0, Total=1056 [2018-04-13 00:07:51,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 690 states. [2018-04-13 00:07:51,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 690 to 362. [2018-04-13 00:07:51,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 362 states. [2018-04-13 00:07:51,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 362 states and 458 transitions. [2018-04-13 00:07:51,909 INFO L78 Accepts]: Start accepts. Automaton has 362 states and 458 transitions. Word has length 1033 [2018-04-13 00:07:51,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:51,909 INFO L459 AbstractCegarLoop]: Abstraction has 362 states and 458 transitions. [2018-04-13 00:07:51,909 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:07:51,909 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 458 transitions. [2018-04-13 00:07:51,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1040 [2018-04-13 00:07:51,914 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:51,915 INFO L355 BasicCegarLoop]: trace histogram [151, 132, 132, 132, 132, 132, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:51,915 INFO L408 AbstractCegarLoop]: === Iteration 73 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:51,915 INFO L82 PathProgramCache]: Analyzing trace with hash -1023409656, now seen corresponding path program 62 times [2018-04-13 00:07:51,916 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:51,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:51,957 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:52,439 INFO L134 CoverageAnalysis]: Checked inductivity of 58982 backedges. 9103 proven. 1649 refuted. 0 times theorem prover too weak. 48230 trivial. 0 not checked. [2018-04-13 00:07:52,439 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:52,439 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:07:52,439 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:52,440 INFO L134 CoverageAnalysis]: Checked inductivity of 5307 backedges. 657 proven. 80 refuted. 0 times theorem prover too weak. 4570 trivial. 0 not checked. [2018-04-13 00:07:52,440 INFO L182 omatonBuilderFactory]: Interpolants [42848#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 42849#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 42850#(<= main_~i~1 13), 42851#(<= main_~i~1 14), 42852#(<= main_~i~1 15), 42833#true, 42834#false, 42835#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 42836#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 42837#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 42838#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 42839#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 42840#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 42841#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 42842#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 42843#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 42844#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 42845#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 42846#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 42847#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:07:52,441 INFO L134 CoverageAnalysis]: Checked inductivity of 58982 backedges. 9103 proven. 1649 refuted. 0 times theorem prover too weak. 48230 trivial. 0 not checked. [2018-04-13 00:07:52,441 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:07:52,441 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:07:52,441 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=131, Invalid=249, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:52,442 INFO L87 Difference]: Start difference. First operand 362 states and 458 transitions. Second operand 20 states. [2018-04-13 00:07:52,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:52,651 INFO L93 Difference]: Finished difference Result 613 states and 1012 transitions. [2018-04-13 00:07:52,651 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2018-04-13 00:07:52,651 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1039 [2018-04-13 00:07:52,652 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:52,654 INFO L225 Difference]: With dead ends: 613 [2018-04-13 00:07:52,655 INFO L226 Difference]: Without dead ends: 613 [2018-04-13 00:07:52,655 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 143 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=369, Invalid=753, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:07:52,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 613 states. [2018-04-13 00:07:52,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 613 to 362. [2018-04-13 00:07:52,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 362 states. [2018-04-13 00:07:52,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 362 states and 458 transitions. [2018-04-13 00:07:52,662 INFO L78 Accepts]: Start accepts. Automaton has 362 states and 458 transitions. Word has length 1039 [2018-04-13 00:07:52,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:52,662 INFO L459 AbstractCegarLoop]: Abstraction has 362 states and 458 transitions. [2018-04-13 00:07:52,662 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:07:52,662 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 458 transitions. [2018-04-13 00:07:52,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1046 [2018-04-13 00:07:52,667 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:52,668 INFO L355 BasicCegarLoop]: trace histogram [152, 133, 133, 133, 133, 133, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:52,668 INFO L408 AbstractCegarLoop]: === Iteration 74 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:52,668 INFO L82 PathProgramCache]: Analyzing trace with hash -1458828144, now seen corresponding path program 63 times [2018-04-13 00:07:52,668 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:52,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:52,708 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:53,134 INFO L134 CoverageAnalysis]: Checked inductivity of 59812 backedges. 10902 proven. 574 refuted. 0 times theorem prover too weak. 48336 trivial. 0 not checked. [2018-04-13 00:07:53,135 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:53,135 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:07:53,135 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:53,135 INFO L134 CoverageAnalysis]: Checked inductivity of 5313 backedges. 743 proven. 0 refuted. 0 times theorem prover too weak. 4570 trivial. 0 not checked. [2018-04-13 00:07:53,135 INFO L182 omatonBuilderFactory]: Interpolants [43872#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 43873#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 43874#(<= main_~i~1 14), 43875#(<= main_~i~1 15), 43856#true, 43857#false, 43858#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 43859#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 43860#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 43861#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 43862#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 43863#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 43864#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 43865#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 43866#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 43867#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 43868#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 43869#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 43870#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 43871#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13))] [2018-04-13 00:07:53,137 INFO L134 CoverageAnalysis]: Checked inductivity of 59812 backedges. 10902 proven. 574 refuted. 0 times theorem prover too weak. 48336 trivial. 0 not checked. [2018-04-13 00:07:53,137 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:07:53,137 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:07:53,137 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=237, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:53,137 INFO L87 Difference]: Start difference. First operand 362 states and 458 transitions. Second operand 20 states. [2018-04-13 00:07:53,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:53,380 INFO L93 Difference]: Finished difference Result 529 states and 847 transitions. [2018-04-13 00:07:53,380 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2018-04-13 00:07:53,380 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1045 [2018-04-13 00:07:53,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:53,383 INFO L225 Difference]: With dead ends: 529 [2018-04-13 00:07:53,383 INFO L226 Difference]: Without dead ends: 529 [2018-04-13 00:07:53,383 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=413, Invalid=777, Unknown=0, NotChecked=0, Total=1190 [2018-04-13 00:07:53,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2018-04-13 00:07:53,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 371. [2018-04-13 00:07:53,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 371 states. [2018-04-13 00:07:53,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 484 transitions. [2018-04-13 00:07:53,390 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 484 transitions. Word has length 1045 [2018-04-13 00:07:53,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:53,391 INFO L459 AbstractCegarLoop]: Abstraction has 371 states and 484 transitions. [2018-04-13 00:07:53,391 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:07:53,391 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 484 transitions. [2018-04-13 00:07:53,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1052 [2018-04-13 00:07:53,396 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:53,396 INFO L355 BasicCegarLoop]: trace histogram [153, 134, 134, 134, 134, 134, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:53,396 INFO L408 AbstractCegarLoop]: === Iteration 75 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:53,396 INFO L82 PathProgramCache]: Analyzing trace with hash 1391339608, now seen corresponding path program 64 times [2018-04-13 00:07:53,397 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:53,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:53,435 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:53,833 INFO L134 CoverageAnalysis]: Checked inductivity of 60648 backedges. 0 proven. 1064 refuted. 0 times theorem prover too weak. 59584 trivial. 0 not checked. [2018-04-13 00:07:53,833 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:53,834 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:07:53,834 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:53,834 INFO L134 CoverageAnalysis]: Checked inductivity of 5310 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5310 trivial. 0 not checked. [2018-04-13 00:07:53,834 INFO L182 omatonBuilderFactory]: Interpolants [44806#true, 44807#false, 44808#(= main_~i~1 0), 44809#(<= main_~i~1 1), 44810#(<= main_~i~1 2), 44811#(<= main_~i~1 3), 44812#(<= main_~i~1 4), 44813#(<= main_~i~1 5), 44814#(<= main_~i~1 6), 44815#(<= main_~i~1 7), 44816#(<= main_~i~1 8), 44817#(<= main_~i~1 9), 44818#(<= main_~i~1 10), 44819#(<= main_~i~1 11), 44820#(<= main_~i~1 12), 44821#(<= main_~i~1 13), 44822#(<= main_~i~1 14), 44823#(<= main_~i~1 15), 44824#(<= main_~i~1 16), 44825#(<= main_~i~1 17), 44826#(<= main_~i~1 18), 44827#(<= main_~i~1 19)] [2018-04-13 00:07:53,835 INFO L134 CoverageAnalysis]: Checked inductivity of 60648 backedges. 0 proven. 1064 refuted. 0 times theorem prover too weak. 59584 trivial. 0 not checked. [2018-04-13 00:07:53,835 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:07:53,835 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:07:53,836 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=231, Invalid=231, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:07:53,836 INFO L87 Difference]: Start difference. First operand 371 states and 484 transitions. Second operand 22 states. [2018-04-13 00:07:54,005 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:54,005 INFO L93 Difference]: Finished difference Result 545 states and 676 transitions. [2018-04-13 00:07:54,005 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2018-04-13 00:07:54,005 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1051 [2018-04-13 00:07:54,006 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:54,007 INFO L225 Difference]: With dead ends: 545 [2018-04-13 00:07:54,007 INFO L226 Difference]: Without dead ends: 545 [2018-04-13 00:07:54,008 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=231, Invalid=231, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:07:54,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 545 states. [2018-04-13 00:07:54,012 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 545 to 382. [2018-04-13 00:07:54,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 382 states. [2018-04-13 00:07:54,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 382 states and 500 transitions. [2018-04-13 00:07:54,013 INFO L78 Accepts]: Start accepts. Automaton has 382 states and 500 transitions. Word has length 1051 [2018-04-13 00:07:54,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:54,013 INFO L459 AbstractCegarLoop]: Abstraction has 382 states and 500 transitions. [2018-04-13 00:07:54,013 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:07:54,013 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 500 transitions. [2018-04-13 00:07:54,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1112 [2018-04-13 00:07:54,018 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:54,019 INFO L355 BasicCegarLoop]: trace histogram [162, 142, 142, 142, 142, 142, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:54,019 INFO L408 AbstractCegarLoop]: === Iteration 76 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:54,019 INFO L82 PathProgramCache]: Analyzing trace with hash 131832409, now seen corresponding path program 65 times [2018-04-13 00:07:54,019 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:54,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:54,058 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:54,498 INFO L134 CoverageAnalysis]: Checked inductivity of 68066 backedges. 5302 proven. 2377 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:54,498 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:54,498 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-13 00:07:54,499 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:54,499 INFO L134 CoverageAnalysis]: Checked inductivity of 6075 backedges. 598 proven. 150 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:54,499 INFO L182 omatonBuilderFactory]: Interpolants [45760#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 45761#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 45762#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 45763#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 45764#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 45765#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 45766#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 8), 45767#(<= main_~i~1 8), 45768#(<= main_~i~1 9), 45769#(<= main_~i~1 10), 45770#(<= main_~i~1 11), 45771#(<= main_~i~1 12), 45755#true, 45756#false, 45757#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 45758#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 45759#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:07:54,500 INFO L134 CoverageAnalysis]: Checked inductivity of 68066 backedges. 5302 proven. 2377 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:54,500 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-13 00:07:54,500 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-13 00:07:54,500 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=195, Unknown=0, NotChecked=0, Total=272 [2018-04-13 00:07:54,501 INFO L87 Difference]: Start difference. First operand 382 states and 500 transitions. Second operand 17 states. [2018-04-13 00:07:54,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:54,694 INFO L93 Difference]: Finished difference Result 796 states and 1255 transitions. [2018-04-13 00:07:54,694 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-04-13 00:07:54,694 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 1111 [2018-04-13 00:07:54,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:54,697 INFO L225 Difference]: With dead ends: 796 [2018-04-13 00:07:54,697 INFO L226 Difference]: Without dead ends: 796 [2018-04-13 00:07:54,698 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=185, Invalid=465, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:07:54,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 796 states. [2018-04-13 00:07:54,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 796 to 385. [2018-04-13 00:07:54,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 385 states. [2018-04-13 00:07:54,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 385 states and 520 transitions. [2018-04-13 00:07:54,705 INFO L78 Accepts]: Start accepts. Automaton has 385 states and 520 transitions. Word has length 1111 [2018-04-13 00:07:54,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:54,705 INFO L459 AbstractCegarLoop]: Abstraction has 385 states and 520 transitions. [2018-04-13 00:07:54,705 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-13 00:07:54,705 INFO L276 IsEmpty]: Start isEmpty. Operand 385 states and 520 transitions. [2018-04-13 00:07:54,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1118 [2018-04-13 00:07:54,711 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:54,711 INFO L355 BasicCegarLoop]: trace histogram [163, 143, 143, 143, 143, 143, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:54,711 INFO L408 AbstractCegarLoop]: === Iteration 77 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:54,711 INFO L82 PathProgramCache]: Analyzing trace with hash 215225761, now seen corresponding path program 66 times [2018-04-13 00:07:54,712 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:54,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:54,751 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:55,226 INFO L134 CoverageAnalysis]: Checked inductivity of 68958 backedges. 5886 proven. 2685 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:55,226 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:55,226 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-13 00:07:55,227 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:55,227 INFO L134 CoverageAnalysis]: Checked inductivity of 6069 backedges. 574 proven. 168 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:55,227 INFO L182 omatonBuilderFactory]: Interpolants [46976#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 46977#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 46978#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 46979#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 46980#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 46981#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 46982#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 46983#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 46984#(<= main_~i~1 9), 46985#(<= main_~i~1 10), 46986#(<= main_~i~1 11), 46987#(<= main_~i~1 12), 46988#(<= main_~i~1 13), 46971#true, 46972#false, 46973#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 46974#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 46975#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:07:55,228 INFO L134 CoverageAnalysis]: Checked inductivity of 68958 backedges. 5886 proven. 2685 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:55,229 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-13 00:07:55,229 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-13 00:07:55,229 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=218, Unknown=0, NotChecked=0, Total=306 [2018-04-13 00:07:55,229 INFO L87 Difference]: Start difference. First operand 385 states and 520 transitions. Second operand 18 states. [2018-04-13 00:07:55,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:55,450 INFO L93 Difference]: Finished difference Result 799 states and 1334 transitions. [2018-04-13 00:07:55,450 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2018-04-13 00:07:55,450 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 1117 [2018-04-13 00:07:55,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:55,453 INFO L225 Difference]: With dead ends: 799 [2018-04-13 00:07:55,453 INFO L226 Difference]: Without dead ends: 799 [2018-04-13 00:07:55,454 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=218, Invalid=538, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:07:55,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 799 states. [2018-04-13 00:07:55,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 799 to 385. [2018-04-13 00:07:55,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 385 states. [2018-04-13 00:07:55,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 385 states and 520 transitions. [2018-04-13 00:07:55,462 INFO L78 Accepts]: Start accepts. Automaton has 385 states and 520 transitions. Word has length 1117 [2018-04-13 00:07:55,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:55,463 INFO L459 AbstractCegarLoop]: Abstraction has 385 states and 520 transitions. [2018-04-13 00:07:55,463 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-13 00:07:55,463 INFO L276 IsEmpty]: Start isEmpty. Operand 385 states and 520 transitions. [2018-04-13 00:07:55,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1124 [2018-04-13 00:07:55,468 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:55,469 INFO L355 BasicCegarLoop]: trace histogram [164, 144, 144, 144, 144, 144, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:55,469 INFO L408 AbstractCegarLoop]: === Iteration 78 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:55,469 INFO L82 PathProgramCache]: Analyzing trace with hash -150668567, now seen corresponding path program 67 times [2018-04-13 00:07:55,469 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:55,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:55,513 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:56,019 INFO L134 CoverageAnalysis]: Checked inductivity of 69856 backedges. 6470 proven. 2999 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:56,019 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:56,019 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-13 00:07:56,019 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:56,020 INFO L134 CoverageAnalysis]: Checked inductivity of 6087 backedges. 574 proven. 186 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:56,020 INFO L182 omatonBuilderFactory]: Interpolants [48193#true, 48194#false, 48195#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 48196#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 48197#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 48198#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 48199#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 48200#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 48201#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 48202#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 48203#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 48204#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 48205#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 48206#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 48207#(<= main_~i~1 10), 48208#(<= main_~i~1 11), 48209#(<= main_~i~1 12), 48210#(<= main_~i~1 13), 48211#(<= main_~i~1 14)] [2018-04-13 00:07:56,021 INFO L134 CoverageAnalysis]: Checked inductivity of 69856 backedges. 6470 proven. 2999 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:56,021 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-13 00:07:56,021 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-13 00:07:56,022 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=242, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:07:56,022 INFO L87 Difference]: Start difference. First operand 385 states and 520 transitions. Second operand 19 states. [2018-04-13 00:07:56,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:56,289 INFO L93 Difference]: Finished difference Result 802 states and 1413 transitions. [2018-04-13 00:07:56,289 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-04-13 00:07:56,289 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 1123 [2018-04-13 00:07:56,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:56,293 INFO L225 Difference]: With dead ends: 802 [2018-04-13 00:07:56,293 INFO L226 Difference]: Without dead ends: 802 [2018-04-13 00:07:56,294 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 115 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=254, Invalid=616, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:07:56,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 802 states. [2018-04-13 00:07:56,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 802 to 385. [2018-04-13 00:07:56,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 385 states. [2018-04-13 00:07:56,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 385 states and 520 transitions. [2018-04-13 00:07:56,305 INFO L78 Accepts]: Start accepts. Automaton has 385 states and 520 transitions. Word has length 1123 [2018-04-13 00:07:56,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:56,305 INFO L459 AbstractCegarLoop]: Abstraction has 385 states and 520 transitions. [2018-04-13 00:07:56,305 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-13 00:07:56,305 INFO L276 IsEmpty]: Start isEmpty. Operand 385 states and 520 transitions. [2018-04-13 00:07:56,311 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1130 [2018-04-13 00:07:56,311 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:56,311 INFO L355 BasicCegarLoop]: trace histogram [165, 145, 145, 145, 145, 145, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:56,312 INFO L408 AbstractCegarLoop]: === Iteration 79 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:56,312 INFO L82 PathProgramCache]: Analyzing trace with hash 1358350897, now seen corresponding path program 68 times [2018-04-13 00:07:56,312 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:56,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:56,363 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:56,876 INFO L134 CoverageAnalysis]: Checked inductivity of 70760 backedges. 7054 proven. 3319 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:56,877 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:56,877 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:07:56,877 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:56,877 INFO L134 CoverageAnalysis]: Checked inductivity of 6105 backedges. 574 proven. 204 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:56,877 INFO L182 omatonBuilderFactory]: Interpolants [49440#(<= main_~i~1 15), 49421#true, 49422#false, 49423#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 49424#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 49425#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 49426#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 49427#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 49428#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 49429#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 49430#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 49431#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 49432#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 49433#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 49434#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 49435#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 49436#(<= main_~i~1 11), 49437#(<= main_~i~1 12), 49438#(<= main_~i~1 13), 49439#(<= main_~i~1 14)] [2018-04-13 00:07:56,879 INFO L134 CoverageAnalysis]: Checked inductivity of 70760 backedges. 7054 proven. 3319 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:56,879 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:07:56,879 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:07:56,879 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=113, Invalid=267, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:07:56,879 INFO L87 Difference]: Start difference. First operand 385 states and 520 transitions. Second operand 20 states. [2018-04-13 00:07:57,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:57,165 INFO L93 Difference]: Finished difference Result 805 states and 1492 transitions. [2018-04-13 00:07:57,165 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-04-13 00:07:57,165 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1129 [2018-04-13 00:07:57,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:57,171 INFO L225 Difference]: With dead ends: 805 [2018-04-13 00:07:57,171 INFO L226 Difference]: Without dead ends: 805 [2018-04-13 00:07:57,171 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=293, Invalid=699, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:07:57,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 805 states. [2018-04-13 00:07:57,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 805 to 385. [2018-04-13 00:07:57,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 385 states. [2018-04-13 00:07:57,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 385 states and 520 transitions. [2018-04-13 00:07:57,183 INFO L78 Accepts]: Start accepts. Automaton has 385 states and 520 transitions. Word has length 1129 [2018-04-13 00:07:57,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:57,184 INFO L459 AbstractCegarLoop]: Abstraction has 385 states and 520 transitions. [2018-04-13 00:07:57,184 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:07:57,184 INFO L276 IsEmpty]: Start isEmpty. Operand 385 states and 520 transitions. [2018-04-13 00:07:57,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1136 [2018-04-13 00:07:57,190 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:57,190 INFO L355 BasicCegarLoop]: trace histogram [166, 146, 146, 146, 146, 146, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:57,190 INFO L408 AbstractCegarLoop]: === Iteration 80 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:57,190 INFO L82 PathProgramCache]: Analyzing trace with hash -1127087239, now seen corresponding path program 69 times [2018-04-13 00:07:57,191 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:57,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:57,235 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:57,769 INFO L134 CoverageAnalysis]: Checked inductivity of 71670 backedges. 7638 proven. 3645 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:57,769 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:57,806 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:07:57,806 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:57,807 INFO L134 CoverageAnalysis]: Checked inductivity of 6123 backedges. 574 proven. 222 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:57,807 INFO L182 omatonBuilderFactory]: Interpolants [50656#false, 50657#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 50658#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 50659#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 50660#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 50661#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 50662#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 50663#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 50664#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 50665#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 50666#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 50667#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 50668#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 50669#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 50670#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 50671#(<= main_~i~1 12), 50672#(<= main_~i~1 13), 50673#(<= main_~i~1 14), 50674#(<= main_~i~1 15), 50675#(<= main_~i~1 16), 50655#true] [2018-04-13 00:07:57,808 INFO L134 CoverageAnalysis]: Checked inductivity of 71670 backedges. 7638 proven. 3645 refuted. 0 times theorem prover too weak. 60387 trivial. 0 not checked. [2018-04-13 00:07:57,808 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:07:57,809 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:07:57,809 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=293, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:57,809 INFO L87 Difference]: Start difference. First operand 385 states and 520 transitions. Second operand 21 states. [2018-04-13 00:07:58,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:58,117 INFO L93 Difference]: Finished difference Result 805 states and 1492 transitions. [2018-04-13 00:07:58,117 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2018-04-13 00:07:58,117 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 1135 [2018-04-13 00:07:58,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:58,122 INFO L225 Difference]: With dead ends: 805 [2018-04-13 00:07:58,122 INFO L226 Difference]: Without dead ends: 805 [2018-04-13 00:07:58,122 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 150 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=335, Invalid=787, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:07:58,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 805 states. [2018-04-13 00:07:58,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 805 to 382. [2018-04-13 00:07:58,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 382 states. [2018-04-13 00:07:58,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 382 states and 500 transitions. [2018-04-13 00:07:58,135 INFO L78 Accepts]: Start accepts. Automaton has 382 states and 500 transitions. Word has length 1135 [2018-04-13 00:07:58,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:58,135 INFO L459 AbstractCegarLoop]: Abstraction has 382 states and 500 transitions. [2018-04-13 00:07:58,135 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:07:58,136 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 500 transitions. [2018-04-13 00:07:58,141 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1142 [2018-04-13 00:07:58,142 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:58,142 INFO L355 BasicCegarLoop]: trace histogram [167, 147, 147, 147, 147, 147, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:58,142 INFO L408 AbstractCegarLoop]: === Iteration 81 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:58,142 INFO L82 PathProgramCache]: Analyzing trace with hash -1134614847, now seen corresponding path program 70 times [2018-04-13 00:07:58,143 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:58,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:58,190 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:58,737 INFO L134 CoverageAnalysis]: Checked inductivity of 72586 backedges. 9209 proven. 2890 refuted. 0 times theorem prover too weak. 60487 trivial. 0 not checked. [2018-04-13 00:07:58,738 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:58,738 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:07:58,738 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:58,738 INFO L134 CoverageAnalysis]: Checked inductivity of 6144 backedges. 657 proven. 160 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:58,738 INFO L182 omatonBuilderFactory]: Interpolants [51904#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 51905#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 51906#(<= main_~i~1 13), 51907#(<= main_~i~1 14), 51908#(<= main_~i~1 15), 51909#(<= main_~i~1 16), 51889#true, 51890#false, 51891#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 51892#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 51893#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 51894#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 51895#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 51896#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 51897#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 51898#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 51899#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 51900#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 51901#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 51902#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 51903#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:07:58,740 INFO L134 CoverageAnalysis]: Checked inductivity of 72586 backedges. 9209 proven. 2890 refuted. 0 times theorem prover too weak. 60487 trivial. 0 not checked. [2018-04-13 00:07:58,740 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:07:58,740 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:07:58,740 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=136, Invalid=284, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:58,740 INFO L87 Difference]: Start difference. First operand 382 states and 500 transitions. Second operand 21 states. [2018-04-13 00:07:58,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:58,979 INFO L93 Difference]: Finished difference Result 730 states and 1319 transitions. [2018-04-13 00:07:58,979 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2018-04-13 00:07:58,979 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 1141 [2018-04-13 00:07:58,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:58,984 INFO L225 Difference]: With dead ends: 730 [2018-04-13 00:07:58,984 INFO L226 Difference]: Without dead ends: 730 [2018-04-13 00:07:58,984 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 156 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=374, Invalid=816, Unknown=0, NotChecked=0, Total=1190 [2018-04-13 00:07:58,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 730 states. [2018-04-13 00:07:58,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 730 to 382. [2018-04-13 00:07:58,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 382 states. [2018-04-13 00:07:59,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 382 states and 500 transitions. [2018-04-13 00:07:59,000 INFO L78 Accepts]: Start accepts. Automaton has 382 states and 500 transitions. Word has length 1141 [2018-04-13 00:07:59,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:59,001 INFO L459 AbstractCegarLoop]: Abstraction has 382 states and 500 transitions. [2018-04-13 00:07:59,001 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:07:59,001 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 500 transitions. [2018-04-13 00:07:59,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1148 [2018-04-13 00:07:59,010 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:59,011 INFO L355 BasicCegarLoop]: trace histogram [168, 148, 148, 148, 148, 148, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:59,011 INFO L408 AbstractCegarLoop]: === Iteration 82 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:59,011 INFO L82 PathProgramCache]: Analyzing trace with hash 674155337, now seen corresponding path program 71 times [2018-04-13 00:07:59,012 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:07:59,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:07:59,088 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:07:59,679 INFO L134 CoverageAnalysis]: Checked inductivity of 73508 backedges. 11014 proven. 1901 refuted. 0 times theorem prover too weak. 60593 trivial. 0 not checked. [2018-04-13 00:07:59,679 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:07:59,680 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:07:59,680 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:07:59,680 INFO L134 CoverageAnalysis]: Checked inductivity of 6156 backedges. 743 proven. 86 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:07:59,680 INFO L182 omatonBuilderFactory]: Interpolants [53056#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 53057#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 53058#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 53059#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 53060#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 53061#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 53062#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 53063#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 53064#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 53065#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 53066#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 53067#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 53068#(<= main_~i~1 14), 53069#(<= main_~i~1 15), 53070#(<= main_~i~1 16), 53050#true, 53051#false, 53052#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 53053#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 53054#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 53055#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3))] [2018-04-13 00:07:59,682 INFO L134 CoverageAnalysis]: Checked inductivity of 73508 backedges. 11014 proven. 1901 refuted. 0 times theorem prover too weak. 60593 trivial. 0 not checked. [2018-04-13 00:07:59,682 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:07:59,682 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:07:59,682 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=147, Invalid=273, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:07:59,682 INFO L87 Difference]: Start difference. First operand 382 states and 500 transitions. Second operand 21 states. [2018-04-13 00:07:59,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:07:59,948 INFO L93 Difference]: Finished difference Result 647 states and 1119 transitions. [2018-04-13 00:07:59,948 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-04-13 00:07:59,948 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 1147 [2018-04-13 00:07:59,948 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:07:59,951 INFO L225 Difference]: With dead ends: 647 [2018-04-13 00:07:59,951 INFO L226 Difference]: Without dead ends: 647 [2018-04-13 00:07:59,951 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 161 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=417, Invalid=843, Unknown=0, NotChecked=0, Total=1260 [2018-04-13 00:07:59,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2018-04-13 00:07:59,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 382. [2018-04-13 00:07:59,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 382 states. [2018-04-13 00:07:59,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 382 states and 500 transitions. [2018-04-13 00:07:59,959 INFO L78 Accepts]: Start accepts. Automaton has 382 states and 500 transitions. Word has length 1147 [2018-04-13 00:07:59,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:07:59,959 INFO L459 AbstractCegarLoop]: Abstraction has 382 states and 500 transitions. [2018-04-13 00:07:59,959 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:07:59,959 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 500 transitions. [2018-04-13 00:07:59,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1154 [2018-04-13 00:07:59,965 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:07:59,965 INFO L355 BasicCegarLoop]: trace histogram [169, 149, 149, 149, 149, 149, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:07:59,965 INFO L408 AbstractCegarLoop]: === Iteration 83 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:07:59,966 INFO L82 PathProgramCache]: Analyzing trace with hash -1101819631, now seen corresponding path program 72 times [2018-04-13 00:07:59,966 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:00,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:00,014 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:00,529 INFO L134 CoverageAnalysis]: Checked inductivity of 74436 backedges. 13071 proven. 660 refuted. 0 times theorem prover too weak. 60705 trivial. 0 not checked. [2018-04-13 00:08:00,529 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:00,529 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:08:00,529 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:00,530 INFO L134 CoverageAnalysis]: Checked inductivity of 6162 backedges. 835 proven. 0 refuted. 0 times theorem prover too weak. 5327 trivial. 0 not checked. [2018-04-13 00:08:00,530 INFO L182 omatonBuilderFactory]: Interpolants [54144#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 54145#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 54146#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 54147#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 54148#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 54149#(<= main_~i~1 15), 54150#(<= main_~i~1 16), 54130#true, 54131#false, 54132#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 54133#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 54134#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 54135#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 54136#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 54137#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 54138#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 54139#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 54140#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 54141#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 54142#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 54143#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11))] [2018-04-13 00:08:00,531 INFO L134 CoverageAnalysis]: Checked inductivity of 74436 backedges. 13071 proven. 660 refuted. 0 times theorem prover too weak. 60705 trivial. 0 not checked. [2018-04-13 00:08:00,532 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:08:00,532 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:08:00,532 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=260, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:08:00,532 INFO L87 Difference]: Start difference. First operand 382 states and 500 transitions. Second operand 21 states. [2018-04-13 00:08:00,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:00,788 INFO L93 Difference]: Finished difference Result 557 states and 927 transitions. [2018-04-13 00:08:00,788 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2018-04-13 00:08:00,788 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 1153 [2018-04-13 00:08:00,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:00,790 INFO L225 Difference]: With dead ends: 557 [2018-04-13 00:08:00,790 INFO L226 Difference]: Without dead ends: 557 [2018-04-13 00:08:00,791 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=464, Invalid=868, Unknown=0, NotChecked=0, Total=1332 [2018-04-13 00:08:00,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 557 states. [2018-04-13 00:08:00,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 557 to 391. [2018-04-13 00:08:00,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 391 states. [2018-04-13 00:08:00,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 391 states to 391 states and 527 transitions. [2018-04-13 00:08:00,796 INFO L78 Accepts]: Start accepts. Automaton has 391 states and 527 transitions. Word has length 1153 [2018-04-13 00:08:00,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:00,796 INFO L459 AbstractCegarLoop]: Abstraction has 391 states and 527 transitions. [2018-04-13 00:08:00,796 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:08:00,796 INFO L276 IsEmpty]: Start isEmpty. Operand 391 states and 527 transitions. [2018-04-13 00:08:00,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1160 [2018-04-13 00:08:00,802 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:00,803 INFO L355 BasicCegarLoop]: trace histogram [170, 150, 150, 150, 150, 150, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:00,803 INFO L408 AbstractCegarLoop]: === Iteration 84 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:00,803 INFO L82 PathProgramCache]: Analyzing trace with hash 1971750937, now seen corresponding path program 73 times [2018-04-13 00:08:00,803 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:00,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:00,848 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:01,345 INFO L134 CoverageAnalysis]: Checked inductivity of 75370 backedges. 2859 proven. 5694 refuted. 0 times theorem prover too weak. 66817 trivial. 0 not checked. [2018-04-13 00:08:01,346 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:01,346 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:01,346 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:01,346 INFO L134 CoverageAnalysis]: Checked inductivity of 6159 backedges. 227 proven. 518 refuted. 0 times theorem prover too weak. 5414 trivial. 0 not checked. [2018-04-13 00:08:01,346 INFO L182 omatonBuilderFactory]: Interpolants [55136#(<= 3 main_~i~1), 55137#(<= 4 main_~i~1), 55138#(<= 5 main_~i~1), 55139#(<= 6 main_~i~1), 55140#(<= 7 main_~i~1), 55141#(<= 8 main_~i~1), 55142#(<= 9 main_~i~1), 55143#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 55144#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 55145#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 55146#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 55147#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 55148#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 55149#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 55150#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 55151#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 55152#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 8), 55131#true, 55132#false, 55133#(<= 0 main_~i~1), 55134#(<= 1 main_~i~1), 55135#(<= 2 main_~i~1)] [2018-04-13 00:08:01,348 INFO L134 CoverageAnalysis]: Checked inductivity of 75370 backedges. 2859 proven. 5694 refuted. 0 times theorem prover too weak. 66817 trivial. 0 not checked. [2018-04-13 00:08:01,348 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:01,348 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:01,348 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=340, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:01,348 INFO L87 Difference]: Start difference. First operand 391 states and 527 transitions. Second operand 22 states. [2018-04-13 00:08:02,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:02,000 INFO L93 Difference]: Finished difference Result 439 states and 572 transitions. [2018-04-13 00:08:02,001 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-04-13 00:08:02,001 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1159 [2018-04-13 00:08:02,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:02,002 INFO L225 Difference]: With dead ends: 439 [2018-04-13 00:08:02,002 INFO L226 Difference]: Without dead ends: 439 [2018-04-13 00:08:02,003 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 215 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=230, Invalid=700, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:08:02,003 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2018-04-13 00:08:02,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 394. [2018-04-13 00:08:02,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 394 states. [2018-04-13 00:08:02,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 394 states to 394 states and 536 transitions. [2018-04-13 00:08:02,008 INFO L78 Accepts]: Start accepts. Automaton has 394 states and 536 transitions. Word has length 1159 [2018-04-13 00:08:02,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:02,008 INFO L459 AbstractCegarLoop]: Abstraction has 394 states and 536 transitions. [2018-04-13 00:08:02,008 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:02,008 INFO L276 IsEmpty]: Start isEmpty. Operand 394 states and 536 transitions. [2018-04-13 00:08:02,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1202 [2018-04-13 00:08:02,014 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:02,014 INFO L355 BasicCegarLoop]: trace histogram [177, 157, 157, 157, 157, 157, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:02,014 INFO L408 AbstractCegarLoop]: === Iteration 85 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:02,015 INFO L82 PathProgramCache]: Analyzing trace with hash 1076968977, now seen corresponding path program 74 times [2018-04-13 00:08:02,015 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:02,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:02,064 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:02,600 INFO L134 CoverageAnalysis]: Checked inductivity of 82076 backedges. 0 proven. 1180 refuted. 0 times theorem prover too weak. 80896 trivial. 0 not checked. [2018-04-13 00:08:02,601 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:02,601 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:02,601 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:02,601 INFO L134 CoverageAnalysis]: Checked inductivity of 6432 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6432 trivial. 0 not checked. [2018-04-13 00:08:02,601 INFO L182 omatonBuilderFactory]: Interpolants [56004#true, 56005#false, 56006#(= main_~i~1 0), 56007#(<= main_~i~1 1), 56008#(<= main_~i~1 2), 56009#(<= main_~i~1 3), 56010#(<= main_~i~1 4), 56011#(<= main_~i~1 5), 56012#(<= main_~i~1 6), 56013#(<= main_~i~1 7), 56014#(<= main_~i~1 8), 56015#(<= main_~i~1 9), 56016#(<= main_~i~1 10), 56017#(<= main_~i~1 11), 56018#(<= main_~i~1 12), 56019#(<= main_~i~1 13), 56020#(<= main_~i~1 14), 56021#(<= main_~i~1 15), 56022#(<= main_~i~1 16), 56023#(<= main_~i~1 17), 56024#(<= main_~i~1 18), 56025#(<= main_~i~1 19), 56026#(<= main_~i~1 20)] [2018-04-13 00:08:02,603 INFO L134 CoverageAnalysis]: Checked inductivity of 82076 backedges. 0 proven. 1180 refuted. 0 times theorem prover too weak. 80896 trivial. 0 not checked. [2018-04-13 00:08:02,603 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:02,603 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:02,603 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=253, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:02,603 INFO L87 Difference]: Start difference. First operand 394 states and 536 transitions. Second operand 23 states. [2018-04-13 00:08:02,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:02,812 INFO L93 Difference]: Finished difference Result 605 states and 798 transitions. [2018-04-13 00:08:02,812 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-04-13 00:08:02,812 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1201 [2018-04-13 00:08:02,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:02,815 INFO L225 Difference]: With dead ends: 605 [2018-04-13 00:08:02,815 INFO L226 Difference]: Without dead ends: 605 [2018-04-13 00:08:02,815 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=253, Invalid=253, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:02,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 605 states. [2018-04-13 00:08:02,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 605 to 405. [2018-04-13 00:08:02,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 405 states. [2018-04-13 00:08:02,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 553 transitions. [2018-04-13 00:08:02,821 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 553 transitions. Word has length 1201 [2018-04-13 00:08:02,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:02,822 INFO L459 AbstractCegarLoop]: Abstraction has 405 states and 553 transitions. [2018-04-13 00:08:02,822 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:02,822 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 553 transitions. [2018-04-13 00:08:02,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1268 [2018-04-13 00:08:02,829 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:02,829 INFO L355 BasicCegarLoop]: trace histogram [187, 166, 166, 166, 166, 166, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:02,829 INFO L408 AbstractCegarLoop]: === Iteration 86 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:02,830 INFO L82 PathProgramCache]: Analyzing trace with hash -1431634982, now seen corresponding path program 75 times [2018-04-13 00:08:02,830 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:02,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:02,935 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:03,539 INFO L134 CoverageAnalysis]: Checked inductivity of 91704 backedges. 6378 proven. 3626 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:03,540 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:03,540 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-13 00:08:03,540 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:03,541 INFO L134 CoverageAnalysis]: Checked inductivity of 7311 backedges. 637 proven. 224 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:03,541 INFO L182 omatonBuilderFactory]: Interpolants [57037#true, 57038#false, 57039#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 57040#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 57041#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 57042#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 57043#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 57044#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 57045#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 57046#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 57047#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 57048#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 57049#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 57050#(<= main_~i~1 9), 57051#(<= main_~i~1 10), 57052#(<= main_~i~1 11), 57053#(<= main_~i~1 12), 57054#(<= main_~i~1 13), 57055#(<= main_~i~1 14)] [2018-04-13 00:08:03,543 INFO L134 CoverageAnalysis]: Checked inductivity of 91704 backedges. 6378 proven. 3626 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:03,543 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-13 00:08:03,543 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-13 00:08:03,543 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=95, Invalid=247, Unknown=0, NotChecked=0, Total=342 [2018-04-13 00:08:03,543 INFO L87 Difference]: Start difference. First operand 405 states and 553 transitions. Second operand 19 states. [2018-04-13 00:08:03,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:03,790 INFO L93 Difference]: Finished difference Result 914 states and 1573 transitions. [2018-04-13 00:08:03,790 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2018-04-13 00:08:03,790 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 1267 [2018-04-13 00:08:03,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:03,796 INFO L225 Difference]: With dead ends: 914 [2018-04-13 00:08:03,796 INFO L226 Difference]: Without dead ends: 914 [2018-04-13 00:08:03,797 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 108 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=225, Invalid=587, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:08:03,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 914 states. [2018-04-13 00:08:03,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 914 to 408. [2018-04-13 00:08:03,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 408 states. [2018-04-13 00:08:03,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 574 transitions. [2018-04-13 00:08:03,814 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 574 transitions. Word has length 1267 [2018-04-13 00:08:03,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:03,814 INFO L459 AbstractCegarLoop]: Abstraction has 408 states and 574 transitions. [2018-04-13 00:08:03,814 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-13 00:08:03,814 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 574 transitions. [2018-04-13 00:08:03,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1274 [2018-04-13 00:08:03,825 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:03,825 INFO L355 BasicCegarLoop]: trace histogram [188, 167, 167, 167, 167, 167, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:03,825 INFO L408 AbstractCegarLoop]: === Iteration 87 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:03,826 INFO L82 PathProgramCache]: Analyzing trace with hash 252508962, now seen corresponding path program 76 times [2018-04-13 00:08:03,826 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:03,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:03,905 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:04,553 INFO L134 CoverageAnalysis]: Checked inductivity of 92742 backedges. 7004 proven. 4038 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:04,554 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:04,554 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:08:04,554 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:04,554 INFO L134 CoverageAnalysis]: Checked inductivity of 7314 backedges. 616 proven. 248 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:04,554 INFO L182 omatonBuilderFactory]: Interpolants [58400#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 58401#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 58402#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 58403#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 58404#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 58405#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 58406#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 58407#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 58408#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 58409#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 58410#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 58411#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 58412#(<= main_~i~1 10), 58413#(<= main_~i~1 11), 58414#(<= main_~i~1 12), 58415#(<= main_~i~1 13), 58416#(<= main_~i~1 14), 58417#(<= main_~i~1 15), 58398#true, 58399#false] [2018-04-13 00:08:04,556 INFO L134 CoverageAnalysis]: Checked inductivity of 92742 backedges. 7004 proven. 4038 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:04,556 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:08:04,556 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:08:04,556 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=273, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:08:04,557 INFO L87 Difference]: Start difference. First operand 408 states and 574 transitions. Second operand 20 states. [2018-04-13 00:08:04,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:04,830 INFO L93 Difference]: Finished difference Result 917 states and 1668 transitions. [2018-04-13 00:08:04,830 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2018-04-13 00:08:04,830 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1273 [2018-04-13 00:08:04,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:04,835 INFO L225 Difference]: With dead ends: 917 [2018-04-13 00:08:04,835 INFO L226 Difference]: Without dead ends: 917 [2018-04-13 00:08:04,835 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 125 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=261, Invalid=669, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:08:04,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 917 states. [2018-04-13 00:08:04,847 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 917 to 408. [2018-04-13 00:08:04,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 408 states. [2018-04-13 00:08:04,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 574 transitions. [2018-04-13 00:08:04,848 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 574 transitions. Word has length 1273 [2018-04-13 00:08:04,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:04,849 INFO L459 AbstractCegarLoop]: Abstraction has 408 states and 574 transitions. [2018-04-13 00:08:04,849 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:08:04,849 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 574 transitions. [2018-04-13 00:08:04,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1280 [2018-04-13 00:08:04,856 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:04,856 INFO L355 BasicCegarLoop]: trace histogram [189, 168, 168, 168, 168, 168, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:04,856 INFO L408 AbstractCegarLoop]: === Iteration 88 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:04,856 INFO L82 PathProgramCache]: Analyzing trace with hash 477389930, now seen corresponding path program 77 times [2018-04-13 00:08:04,856 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:04,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:04,904 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:05,514 INFO L134 CoverageAnalysis]: Checked inductivity of 93786 backedges. 7630 proven. 4456 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:05,514 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:05,514 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:08:05,515 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:05,515 INFO L134 CoverageAnalysis]: Checked inductivity of 7338 backedges. 616 proven. 272 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:05,515 INFO L182 omatonBuilderFactory]: Interpolants [59776#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 59777#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 59778#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 59779#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 59780#(<= main_~i~1 11), 59781#(<= main_~i~1 12), 59782#(<= main_~i~1 13), 59783#(<= main_~i~1 14), 59784#(<= main_~i~1 15), 59785#(<= main_~i~1 16), 59765#true, 59766#false, 59767#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 59768#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 59769#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 59770#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 59771#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 59772#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 59773#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 59774#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 59775#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8))] [2018-04-13 00:08:05,517 INFO L134 CoverageAnalysis]: Checked inductivity of 93786 backedges. 7630 proven. 4456 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:05,517 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:08:05,517 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:08:05,517 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=300, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:08:05,518 INFO L87 Difference]: Start difference. First operand 408 states and 574 transitions. Second operand 21 states. [2018-04-13 00:08:05,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:05,778 INFO L93 Difference]: Finished difference Result 920 states and 1763 transitions. [2018-04-13 00:08:05,778 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2018-04-13 00:08:05,778 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 1279 [2018-04-13 00:08:05,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:05,782 INFO L225 Difference]: With dead ends: 920 [2018-04-13 00:08:05,782 INFO L226 Difference]: Without dead ends: 920 [2018-04-13 00:08:05,782 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 143 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=300, Invalid=756, Unknown=0, NotChecked=0, Total=1056 [2018-04-13 00:08:05,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 920 states. [2018-04-13 00:08:05,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 920 to 408. [2018-04-13 00:08:05,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 408 states. [2018-04-13 00:08:05,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 574 transitions. [2018-04-13 00:08:05,794 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 574 transitions. Word has length 1279 [2018-04-13 00:08:05,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:05,794 INFO L459 AbstractCegarLoop]: Abstraction has 408 states and 574 transitions. [2018-04-13 00:08:05,794 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:08:05,794 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 574 transitions. [2018-04-13 00:08:05,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1286 [2018-04-13 00:08:05,801 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:05,802 INFO L355 BasicCegarLoop]: trace histogram [190, 169, 169, 169, 169, 169, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:05,802 INFO L408 AbstractCegarLoop]: === Iteration 89 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:05,802 INFO L82 PathProgramCache]: Analyzing trace with hash -1884702798, now seen corresponding path program 78 times [2018-04-13 00:08:05,802 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:05,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:05,851 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:06,477 INFO L134 CoverageAnalysis]: Checked inductivity of 94836 backedges. 8256 proven. 4880 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:06,478 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:06,478 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:06,478 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:06,478 INFO L134 CoverageAnalysis]: Checked inductivity of 7362 backedges. 616 proven. 296 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:06,478 INFO L182 omatonBuilderFactory]: Interpolants [61152#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 61153#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 61154#(<= main_~i~1 12), 61155#(<= main_~i~1 13), 61156#(<= main_~i~1 14), 61157#(<= main_~i~1 15), 61158#(<= main_~i~1 16), 61159#(<= main_~i~1 17), 61138#true, 61139#false, 61140#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 61141#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 61142#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 61143#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 61144#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 61145#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 61146#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 61147#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 61148#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 61149#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 61150#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 61151#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11))] [2018-04-13 00:08:06,480 INFO L134 CoverageAnalysis]: Checked inductivity of 94836 backedges. 8256 proven. 4880 refuted. 0 times theorem prover too weak. 81700 trivial. 0 not checked. [2018-04-13 00:08:06,480 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:06,480 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:06,480 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=134, Invalid=328, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:06,481 INFO L87 Difference]: Start difference. First operand 408 states and 574 transitions. Second operand 22 states. [2018-04-13 00:08:06,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:06,730 INFO L93 Difference]: Finished difference Result 920 states and 1763 transitions. [2018-04-13 00:08:06,730 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2018-04-13 00:08:06,730 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1285 [2018-04-13 00:08:06,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:06,734 INFO L225 Difference]: With dead ends: 920 [2018-04-13 00:08:06,734 INFO L226 Difference]: Without dead ends: 920 [2018-04-13 00:08:06,735 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 162 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=342, Invalid=848, Unknown=0, NotChecked=0, Total=1190 [2018-04-13 00:08:06,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 920 states. [2018-04-13 00:08:06,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 920 to 405. [2018-04-13 00:08:06,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 405 states. [2018-04-13 00:08:06,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 553 transitions. [2018-04-13 00:08:06,747 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 553 transitions. Word has length 1285 [2018-04-13 00:08:06,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:06,747 INFO L459 AbstractCegarLoop]: Abstraction has 405 states and 553 transitions. [2018-04-13 00:08:06,747 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:06,747 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 553 transitions. [2018-04-13 00:08:06,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1292 [2018-04-13 00:08:06,754 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:06,754 INFO L355 BasicCegarLoop]: trace histogram [191, 170, 170, 170, 170, 170, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:06,754 INFO L408 AbstractCegarLoop]: === Iteration 90 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:06,755 INFO L82 PathProgramCache]: Analyzing trace with hash -1927973638, now seen corresponding path program 79 times [2018-04-13 00:08:06,755 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:06,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:06,805 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:07,469 INFO L134 CoverageAnalysis]: Checked inductivity of 95892 backedges. 9875 proven. 4217 refuted. 0 times theorem prover too weak. 81800 trivial. 0 not checked. [2018-04-13 00:08:07,469 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:07,470 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:07,470 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:07,470 INFO L134 CoverageAnalysis]: Checked inductivity of 7389 backedges. 699 proven. 240 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:07,470 INFO L182 omatonBuilderFactory]: Interpolants [62528#(<= main_~i~1 13), 62529#(<= main_~i~1 14), 62530#(<= main_~i~1 15), 62531#(<= main_~i~1 16), 62532#(<= main_~i~1 17), 62511#true, 62512#false, 62513#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 62514#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 62515#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 62516#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 62517#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 62518#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 62519#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 62520#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 62521#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 62522#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 62523#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 62524#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 62525#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 62526#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 62527#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13)] [2018-04-13 00:08:07,472 INFO L134 CoverageAnalysis]: Checked inductivity of 95892 backedges. 9875 proven. 4217 refuted. 0 times theorem prover too weak. 81800 trivial. 0 not checked. [2018-04-13 00:08:07,472 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:07,472 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:07,472 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=142, Invalid=320, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:07,473 INFO L87 Difference]: Start difference. First operand 405 states and 553 transitions. Second operand 22 states. [2018-04-13 00:08:07,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:07,781 INFO L93 Difference]: Finished difference Result 851 states and 1604 transitions. [2018-04-13 00:08:07,781 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-04-13 00:08:07,781 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1291 [2018-04-13 00:08:07,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:07,784 INFO L225 Difference]: With dead ends: 851 [2018-04-13 00:08:07,784 INFO L226 Difference]: Without dead ends: 851 [2018-04-13 00:08:07,784 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 169 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=380, Invalid=880, Unknown=0, NotChecked=0, Total=1260 [2018-04-13 00:08:07,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 851 states. [2018-04-13 00:08:07,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 851 to 405. [2018-04-13 00:08:07,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 405 states. [2018-04-13 00:08:07,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 553 transitions. [2018-04-13 00:08:07,794 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 553 transitions. Word has length 1291 [2018-04-13 00:08:07,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:07,795 INFO L459 AbstractCegarLoop]: Abstraction has 405 states and 553 transitions. [2018-04-13 00:08:07,795 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:07,795 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 553 transitions. [2018-04-13 00:08:07,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1298 [2018-04-13 00:08:07,802 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:07,802 INFO L355 BasicCegarLoop]: trace histogram [192, 171, 171, 171, 171, 171, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:07,802 INFO L408 AbstractCegarLoop]: === Iteration 91 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:07,802 INFO L82 PathProgramCache]: Analyzing trace with hash 406344578, now seen corresponding path program 80 times [2018-04-13 00:08:07,803 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:07,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:07,851 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:08,504 INFO L134 CoverageAnalysis]: Checked inductivity of 96954 backedges. 11728 proven. 3320 refuted. 0 times theorem prover too weak. 81906 trivial. 0 not checked. [2018-04-13 00:08:08,505 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:08,505 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:08,505 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:08,505 INFO L134 CoverageAnalysis]: Checked inductivity of 7407 backedges. 785 proven. 172 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:08,506 INFO L182 omatonBuilderFactory]: Interpolants [63817#true, 63818#false, 63819#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 63820#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 63821#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 63822#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 63823#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 63824#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 63825#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 63826#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 63827#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 63828#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 63829#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 63830#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 63831#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 63832#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 63833#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 63834#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 63835#(<= main_~i~1 14), 63836#(<= main_~i~1 15), 63837#(<= main_~i~1 16), 63838#(<= main_~i~1 17)] [2018-04-13 00:08:08,507 INFO L134 CoverageAnalysis]: Checked inductivity of 96954 backedges. 11728 proven. 3320 refuted. 0 times theorem prover too weak. 81906 trivial. 0 not checked. [2018-04-13 00:08:08,507 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:08,508 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:08,508 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=310, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:08,508 INFO L87 Difference]: Start difference. First operand 405 states and 553 transitions. Second operand 22 states. [2018-04-13 00:08:08,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:08,784 INFO L93 Difference]: Finished difference Result 770 states and 1414 transitions. [2018-04-13 00:08:08,784 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2018-04-13 00:08:08,784 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1297 [2018-04-13 00:08:08,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:08,787 INFO L225 Difference]: With dead ends: 770 [2018-04-13 00:08:08,787 INFO L226 Difference]: Without dead ends: 770 [2018-04-13 00:08:08,787 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 175 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=422, Invalid=910, Unknown=0, NotChecked=0, Total=1332 [2018-04-13 00:08:08,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 770 states. [2018-04-13 00:08:08,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 770 to 405. [2018-04-13 00:08:08,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 405 states. [2018-04-13 00:08:08,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 553 transitions. [2018-04-13 00:08:08,796 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 553 transitions. Word has length 1297 [2018-04-13 00:08:08,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:08,796 INFO L459 AbstractCegarLoop]: Abstraction has 405 states and 553 transitions. [2018-04-13 00:08:08,796 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:08,796 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 553 transitions. [2018-04-13 00:08:08,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1304 [2018-04-13 00:08:08,804 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:08,804 INFO L355 BasicCegarLoop]: trace histogram [193, 172, 172, 172, 172, 172, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:08,804 INFO L408 AbstractCegarLoop]: === Iteration 92 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:08,804 INFO L82 PathProgramCache]: Analyzing trace with hash -233508022, now seen corresponding path program 81 times [2018-04-13 00:08:08,805 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:08,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:08,850 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:09,483 INFO L134 CoverageAnalysis]: Checked inductivity of 98022 backedges. 13833 proven. 2171 refuted. 0 times theorem prover too weak. 82018 trivial. 0 not checked. [2018-04-13 00:08:09,483 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:09,483 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:09,484 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:09,484 INFO L134 CoverageAnalysis]: Checked inductivity of 7419 backedges. 877 proven. 92 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:09,484 INFO L182 omatonBuilderFactory]: Interpolants [65056#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 65057#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 65058#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 65059#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 65060#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 65061#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 65062#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 65063#(<= main_~i~1 15), 65064#(<= main_~i~1 16), 65065#(<= main_~i~1 17), 65044#true, 65045#false, 65046#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 65047#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 65048#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 65049#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 65050#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 65051#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 65052#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 65053#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 65054#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 65055#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9))] [2018-04-13 00:08:09,486 INFO L134 CoverageAnalysis]: Checked inductivity of 98022 backedges. 13833 proven. 2171 refuted. 0 times theorem prover too weak. 82018 trivial. 0 not checked. [2018-04-13 00:08:09,486 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:09,486 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:09,486 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=164, Invalid=298, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:09,486 INFO L87 Difference]: Start difference. First operand 405 states and 553 transitions. Second operand 22 states. [2018-04-13 00:08:09,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:09,740 INFO L93 Difference]: Finished difference Result 681 states and 1196 transitions. [2018-04-13 00:08:09,740 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2018-04-13 00:08:09,741 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1303 [2018-04-13 00:08:09,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:09,744 INFO L225 Difference]: With dead ends: 681 [2018-04-13 00:08:09,744 INFO L226 Difference]: Without dead ends: 681 [2018-04-13 00:08:09,744 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 180 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=468, Invalid=938, Unknown=0, NotChecked=0, Total=1406 [2018-04-13 00:08:09,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 681 states. [2018-04-13 00:08:09,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 681 to 405. [2018-04-13 00:08:09,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 405 states. [2018-04-13 00:08:09,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 553 transitions. [2018-04-13 00:08:09,753 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 553 transitions. Word has length 1303 [2018-04-13 00:08:09,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:09,754 INFO L459 AbstractCegarLoop]: Abstraction has 405 states and 553 transitions. [2018-04-13 00:08:09,754 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:09,754 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 553 transitions. [2018-04-13 00:08:09,761 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1310 [2018-04-13 00:08:09,762 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:09,762 INFO L355 BasicCegarLoop]: trace histogram [194, 173, 173, 173, 173, 173, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:09,762 INFO L408 AbstractCegarLoop]: === Iteration 93 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:09,762 INFO L82 PathProgramCache]: Analyzing trace with hash -722705326, now seen corresponding path program 82 times [2018-04-13 00:08:09,763 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:09,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:09,816 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:10,533 INFO L134 CoverageAnalysis]: Checked inductivity of 99096 backedges. 16208 proven. 752 refuted. 0 times theorem prover too weak. 82136 trivial. 0 not checked. [2018-04-13 00:08:10,533 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:10,563 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:10,564 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:10,564 INFO L134 CoverageAnalysis]: Checked inductivity of 7425 backedges. 975 proven. 0 refuted. 0 times theorem prover too weak. 6450 trivial. 0 not checked. [2018-04-13 00:08:10,564 INFO L182 omatonBuilderFactory]: Interpolants [66185#false, 66184#true, 66187#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 66186#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 66189#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 66188#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 66191#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 66190#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 66193#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 66192#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 66195#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 66194#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 66197#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 66196#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 66199#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 66198#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 66201#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 66200#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 66203#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 66202#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 66205#(<= main_~i~1 17), 66204#(<= main_~i~1 16)] [2018-04-13 00:08:10,566 INFO L134 CoverageAnalysis]: Checked inductivity of 99096 backedges. 16208 proven. 752 refuted. 0 times theorem prover too weak. 82136 trivial. 0 not checked. [2018-04-13 00:08:10,566 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:10,567 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:10,567 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=284, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:10,567 INFO L87 Difference]: Start difference. First operand 405 states and 553 transitions. Second operand 22 states. [2018-04-13 00:08:10,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:10,826 INFO L93 Difference]: Finished difference Result 585 states and 987 transitions. [2018-04-13 00:08:10,826 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2018-04-13 00:08:10,826 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1309 [2018-04-13 00:08:10,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:10,829 INFO L225 Difference]: With dead ends: 585 [2018-04-13 00:08:10,829 INFO L226 Difference]: Without dead ends: 585 [2018-04-13 00:08:10,829 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 184 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=518, Invalid=964, Unknown=0, NotChecked=0, Total=1482 [2018-04-13 00:08:10,829 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2018-04-13 00:08:10,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 414. [2018-04-13 00:08:10,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 414 states. [2018-04-13 00:08:10,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 581 transitions. [2018-04-13 00:08:10,837 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 581 transitions. Word has length 1309 [2018-04-13 00:08:10,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:10,837 INFO L459 AbstractCegarLoop]: Abstraction has 414 states and 581 transitions. [2018-04-13 00:08:10,837 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:10,837 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 581 transitions. [2018-04-13 00:08:10,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1316 [2018-04-13 00:08:10,845 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:10,846 INFO L355 BasicCegarLoop]: trace histogram [195, 174, 174, 174, 174, 174, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:10,846 INFO L408 AbstractCegarLoop]: === Iteration 94 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:10,846 INFO L82 PathProgramCache]: Analyzing trace with hash 1802118810, now seen corresponding path program 83 times [2018-04-13 00:08:10,846 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:10,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:10,903 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:11,526 INFO L134 CoverageAnalysis]: Checked inductivity of 100176 backedges. 0 proven. 1302 refuted. 0 times theorem prover too weak. 98874 trivial. 0 not checked. [2018-04-13 00:08:11,526 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:11,526 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:11,526 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:11,527 INFO L134 CoverageAnalysis]: Checked inductivity of 7422 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7422 trivial. 0 not checked. [2018-04-13 00:08:11,527 INFO L182 omatonBuilderFactory]: Interpolants [67239#true, 67241#(= main_~i~1 0), 67240#false, 67243#(<= main_~i~1 2), 67242#(<= main_~i~1 1), 67245#(<= main_~i~1 4), 67244#(<= main_~i~1 3), 67247#(<= main_~i~1 6), 67246#(<= main_~i~1 5), 67249#(<= main_~i~1 8), 67248#(<= main_~i~1 7), 67251#(<= main_~i~1 10), 67250#(<= main_~i~1 9), 67253#(<= main_~i~1 12), 67252#(<= main_~i~1 11), 67255#(<= main_~i~1 14), 67254#(<= main_~i~1 13), 67257#(<= main_~i~1 16), 67256#(<= main_~i~1 15), 67259#(<= main_~i~1 18), 67258#(<= main_~i~1 17), 67261#(<= main_~i~1 20), 67260#(<= main_~i~1 19), 67262#(<= main_~i~1 21)] [2018-04-13 00:08:11,529 INFO L134 CoverageAnalysis]: Checked inductivity of 100176 backedges. 0 proven. 1302 refuted. 0 times theorem prover too weak. 98874 trivial. 0 not checked. [2018-04-13 00:08:11,529 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:11,529 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:11,529 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=276, Invalid=276, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:11,529 INFO L87 Difference]: Start difference. First operand 414 states and 581 transitions. Second operand 24 states. [2018-04-13 00:08:11,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:11,701 INFO L93 Difference]: Finished difference Result 668 states and 935 transitions. [2018-04-13 00:08:11,701 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2018-04-13 00:08:11,701 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1315 [2018-04-13 00:08:11,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:11,704 INFO L225 Difference]: With dead ends: 668 [2018-04-13 00:08:11,704 INFO L226 Difference]: Without dead ends: 668 [2018-04-13 00:08:11,704 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=276, Invalid=276, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:11,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2018-04-13 00:08:11,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 425. [2018-04-13 00:08:11,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 425 states. [2018-04-13 00:08:11,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 599 transitions. [2018-04-13 00:08:11,711 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 599 transitions. Word has length 1315 [2018-04-13 00:08:11,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:11,711 INFO L459 AbstractCegarLoop]: Abstraction has 425 states and 599 transitions. [2018-04-13 00:08:11,711 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:11,711 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 599 transitions. [2018-04-13 00:08:11,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1382 [2018-04-13 00:08:11,719 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:11,720 INFO L355 BasicCegarLoop]: trace histogram [205, 183, 183, 183, 183, 183, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:11,720 INFO L408 AbstractCegarLoop]: === Iteration 95 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:11,720 INFO L82 PathProgramCache]: Analyzing trace with hash -1157351389, now seen corresponding path program 84 times [2018-04-13 00:08:11,721 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:11,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:11,780 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:12,467 INFO L134 CoverageAnalysis]: Checked inductivity of 110786 backedges. 6478 proven. 4629 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:12,467 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:12,467 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-13 00:08:12,467 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:12,468 INFO L134 CoverageAnalysis]: Checked inductivity of 8358 backedges. 637 proven. 280 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:12,468 INFO L182 omatonBuilderFactory]: Interpolants [68357#false, 68356#true, 68359#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 68358#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 68361#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 68360#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 68363#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 68362#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 68365#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 68364#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 68367#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 68366#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 68369#(<= main_~i~1 9), 68368#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 68371#(<= main_~i~1 11), 68370#(<= main_~i~1 10), 68373#(<= main_~i~1 13), 68372#(<= main_~i~1 12), 68375#(<= main_~i~1 15), 68374#(<= main_~i~1 14)] [2018-04-13 00:08:12,470 INFO L134 CoverageAnalysis]: Checked inductivity of 110786 backedges. 6478 proven. 4629 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:12,470 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-13 00:08:12,470 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-13 00:08:12,470 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=103, Invalid=277, Unknown=0, NotChecked=0, Total=380 [2018-04-13 00:08:12,471 INFO L87 Difference]: Start difference. First operand 425 states and 599 transitions. Second operand 20 states. [2018-04-13 00:08:12,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:12,688 INFO L93 Difference]: Finished difference Result 1029 states and 1894 transitions. [2018-04-13 00:08:12,688 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-04-13 00:08:12,689 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1381 [2018-04-13 00:08:12,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:12,694 INFO L225 Difference]: With dead ends: 1029 [2018-04-13 00:08:12,694 INFO L226 Difference]: Without dead ends: 1029 [2018-04-13 00:08:12,694 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=233, Invalid=637, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:08:12,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1029 states. [2018-04-13 00:08:12,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1029 to 428. [2018-04-13 00:08:12,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-04-13 00:08:12,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 621 transitions. [2018-04-13 00:08:12,708 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 621 transitions. Word has length 1381 [2018-04-13 00:08:12,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:12,709 INFO L459 AbstractCegarLoop]: Abstraction has 428 states and 621 transitions. [2018-04-13 00:08:12,709 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-13 00:08:12,709 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 621 transitions. [2018-04-13 00:08:12,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1388 [2018-04-13 00:08:12,718 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:12,719 INFO L355 BasicCegarLoop]: trace histogram [206, 184, 184, 184, 184, 184, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:12,719 INFO L408 AbstractCegarLoop]: === Iteration 96 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:12,719 INFO L82 PathProgramCache]: Analyzing trace with hash 559584619, now seen corresponding path program 85 times [2018-04-13 00:08:12,720 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:12,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:12,789 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:13,493 INFO L134 CoverageAnalysis]: Checked inductivity of 111928 backedges. 7104 proven. 5145 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:13,494 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:13,494 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-13 00:08:13,494 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:13,495 INFO L134 CoverageAnalysis]: Checked inductivity of 8367 backedges. 616 proven. 310 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:13,495 INFO L182 omatonBuilderFactory]: Interpolants [69857#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 69856#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 69859#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 69858#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 69861#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 69860#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 69863#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 69862#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 69865#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 69864#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 69867#(<= main_~i~1 10), 69866#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 69869#(<= main_~i~1 12), 69868#(<= main_~i~1 11), 69871#(<= main_~i~1 14), 69870#(<= main_~i~1 13), 69873#(<= main_~i~1 16), 69872#(<= main_~i~1 15), 69853#true, 69855#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 69854#false] [2018-04-13 00:08:13,497 INFO L134 CoverageAnalysis]: Checked inductivity of 111928 backedges. 7104 proven. 5145 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:13,497 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-13 00:08:13,497 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-13 00:08:13,497 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=305, Unknown=0, NotChecked=0, Total=420 [2018-04-13 00:08:13,497 INFO L87 Difference]: Start difference. First operand 428 states and 621 transitions. Second operand 21 states. [2018-04-13 00:08:13,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:13,743 INFO L93 Difference]: Finished difference Result 1032 states and 2005 transitions. [2018-04-13 00:08:13,744 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-04-13 00:08:13,744 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 1387 [2018-04-13 00:08:13,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:13,749 INFO L225 Difference]: With dead ends: 1032 [2018-04-13 00:08:13,749 INFO L226 Difference]: Without dead ends: 1032 [2018-04-13 00:08:13,749 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 135 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=269, Invalid=723, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:08:13,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1032 states. [2018-04-13 00:08:13,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1032 to 428. [2018-04-13 00:08:13,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-04-13 00:08:13,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 621 transitions. [2018-04-13 00:08:13,763 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 621 transitions. Word has length 1387 [2018-04-13 00:08:13,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:13,763 INFO L459 AbstractCegarLoop]: Abstraction has 428 states and 621 transitions. [2018-04-13 00:08:13,763 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-13 00:08:13,763 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 621 transitions. [2018-04-13 00:08:13,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1394 [2018-04-13 00:08:13,771 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:13,771 INFO L355 BasicCegarLoop]: trace histogram [207, 185, 185, 185, 185, 185, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:13,771 INFO L408 AbstractCegarLoop]: === Iteration 97 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:13,771 INFO L82 PathProgramCache]: Analyzing trace with hash 1937235123, now seen corresponding path program 86 times [2018-04-13 00:08:13,772 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:13,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:13,824 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:14,525 INFO L134 CoverageAnalysis]: Checked inductivity of 113076 backedges. 7730 proven. 5667 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:14,526 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:14,526 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:14,526 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:14,526 INFO L134 CoverageAnalysis]: Checked inductivity of 8397 backedges. 616 proven. 340 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:14,526 INFO L182 omatonBuilderFactory]: Interpolants [71361#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 71360#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 71363#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 71362#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 71365#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 71364#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 71367#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 71366#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 71369#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 71368#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 71371#(<= main_~i~1 11), 71370#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 71373#(<= main_~i~1 13), 71372#(<= main_~i~1 12), 71375#(<= main_~i~1 15), 71374#(<= main_~i~1 14), 71377#(<= main_~i~1 17), 71376#(<= main_~i~1 16), 71357#false, 71356#true, 71359#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 71358#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0))] [2018-04-13 00:08:14,528 INFO L134 CoverageAnalysis]: Checked inductivity of 113076 backedges. 7730 proven. 5667 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:14,529 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:14,529 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:14,529 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=128, Invalid=334, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:14,529 INFO L87 Difference]: Start difference. First operand 428 states and 621 transitions. Second operand 22 states. [2018-04-13 00:08:14,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:14,831 INFO L93 Difference]: Finished difference Result 1035 states and 2116 transitions. [2018-04-13 00:08:14,831 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2018-04-13 00:08:14,831 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1393 [2018-04-13 00:08:14,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:14,835 INFO L225 Difference]: With dead ends: 1035 [2018-04-13 00:08:14,835 INFO L226 Difference]: Without dead ends: 1035 [2018-04-13 00:08:14,835 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 154 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=308, Invalid=814, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:08:14,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1035 states. [2018-04-13 00:08:14,847 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1035 to 428. [2018-04-13 00:08:14,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-04-13 00:08:14,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 621 transitions. [2018-04-13 00:08:14,848 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 621 transitions. Word has length 1393 [2018-04-13 00:08:14,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:14,848 INFO L459 AbstractCegarLoop]: Abstraction has 428 states and 621 transitions. [2018-04-13 00:08:14,849 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:14,849 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 621 transitions. [2018-04-13 00:08:14,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1400 [2018-04-13 00:08:14,856 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:14,857 INFO L355 BasicCegarLoop]: trace histogram [208, 186, 186, 186, 186, 186, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:14,857 INFO L408 AbstractCegarLoop]: === Iteration 98 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:14,857 INFO L82 PathProgramCache]: Analyzing trace with hash -1224438277, now seen corresponding path program 87 times [2018-04-13 00:08:14,857 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:14,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:14,910 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:15,596 INFO L134 CoverageAnalysis]: Checked inductivity of 114230 backedges. 8356 proven. 6195 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:15,597 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:15,597 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:15,597 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:15,597 INFO L134 CoverageAnalysis]: Checked inductivity of 8427 backedges. 616 proven. 370 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:15,597 INFO L182 omatonBuilderFactory]: Interpolants [72865#true, 72867#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 72866#false, 72869#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 72868#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 72871#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 72870#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 72873#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 72872#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 72875#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 72874#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 72877#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 72876#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 72879#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 72878#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 72881#(<= main_~i~1 12), 72880#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 72883#(<= main_~i~1 14), 72882#(<= main_~i~1 13), 72885#(<= main_~i~1 16), 72884#(<= main_~i~1 15), 72887#(<= main_~i~1 18), 72886#(<= main_~i~1 17)] [2018-04-13 00:08:15,599 INFO L134 CoverageAnalysis]: Checked inductivity of 114230 backedges. 8356 proven. 6195 refuted. 0 times theorem prover too weak. 99679 trivial. 0 not checked. [2018-04-13 00:08:15,600 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:15,600 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:15,600 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=142, Invalid=364, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:15,600 INFO L87 Difference]: Start difference. First operand 428 states and 621 transitions. Second operand 23 states. [2018-04-13 00:08:15,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:15,886 INFO L93 Difference]: Finished difference Result 1035 states and 2116 transitions. [2018-04-13 00:08:15,886 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-04-13 00:08:15,886 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1399 [2018-04-13 00:08:15,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:15,891 INFO L225 Difference]: With dead ends: 1035 [2018-04-13 00:08:15,891 INFO L226 Difference]: Without dead ends: 1035 [2018-04-13 00:08:15,891 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 174 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=350, Invalid=910, Unknown=0, NotChecked=0, Total=1260 [2018-04-13 00:08:15,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1035 states. [2018-04-13 00:08:15,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1035 to 425. [2018-04-13 00:08:15,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 425 states. [2018-04-13 00:08:15,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 599 transitions. [2018-04-13 00:08:15,904 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 599 transitions. Word has length 1399 [2018-04-13 00:08:15,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:15,905 INFO L459 AbstractCegarLoop]: Abstraction has 425 states and 599 transitions. [2018-04-13 00:08:15,905 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:15,905 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 599 transitions. [2018-04-13 00:08:15,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1406 [2018-04-13 00:08:15,912 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:15,913 INFO L355 BasicCegarLoop]: trace histogram [209, 187, 187, 187, 187, 187, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:15,913 INFO L408 AbstractCegarLoop]: === Iteration 99 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:15,913 INFO L82 PathProgramCache]: Analyzing trace with hash 826878275, now seen corresponding path program 88 times [2018-04-13 00:08:15,913 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:15,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:15,961 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:16,650 INFO L134 CoverageAnalysis]: Checked inductivity of 115390 backedges. 9981 proven. 5630 refuted. 0 times theorem prover too weak. 99779 trivial. 0 not checked. [2018-04-13 00:08:16,651 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:16,651 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:16,651 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:16,651 INFO L134 CoverageAnalysis]: Checked inductivity of 8460 backedges. 699 proven. 320 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:16,651 INFO L182 omatonBuilderFactory]: Interpolants [74375#false, 74374#true, 74377#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 74376#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 74379#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 74378#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 74381#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 74380#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 74383#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 74382#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 74385#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 74384#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 74387#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 74386#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 74389#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 74388#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 74391#(<= main_~i~1 13), 74390#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 74393#(<= main_~i~1 15), 74392#(<= main_~i~1 14), 74395#(<= main_~i~1 17), 74394#(<= main_~i~1 16), 74396#(<= main_~i~1 18)] [2018-04-13 00:08:16,653 INFO L134 CoverageAnalysis]: Checked inductivity of 115390 backedges. 9981 proven. 5630 refuted. 0 times theorem prover too weak. 99779 trivial. 0 not checked. [2018-04-13 00:08:16,654 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:16,654 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:16,654 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=149, Invalid=357, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:16,654 INFO L87 Difference]: Start difference. First operand 425 states and 599 transitions. Second operand 23 states. [2018-04-13 00:08:16,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:16,959 INFO L93 Difference]: Finished difference Result 972 states and 1963 transitions. [2018-04-13 00:08:16,959 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2018-04-13 00:08:16,959 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1405 [2018-04-13 00:08:16,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:16,966 INFO L225 Difference]: With dead ends: 972 [2018-04-13 00:08:16,966 INFO L226 Difference]: Without dead ends: 972 [2018-04-13 00:08:16,967 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 182 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=387, Invalid=945, Unknown=0, NotChecked=0, Total=1332 [2018-04-13 00:08:16,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 972 states. [2018-04-13 00:08:16,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 972 to 425. [2018-04-13 00:08:16,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 425 states. [2018-04-13 00:08:16,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 599 transitions. [2018-04-13 00:08:16,990 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 599 transitions. Word has length 1405 [2018-04-13 00:08:16,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:16,991 INFO L459 AbstractCegarLoop]: Abstraction has 425 states and 599 transitions. [2018-04-13 00:08:16,991 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:16,991 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 599 transitions. [2018-04-13 00:08:17,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1412 [2018-04-13 00:08:17,004 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:17,004 INFO L355 BasicCegarLoop]: trace histogram [210, 188, 188, 188, 188, 188, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:17,004 INFO L408 AbstractCegarLoop]: === Iteration 100 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:17,004 INFO L82 PathProgramCache]: Analyzing trace with hash 1945638347, now seen corresponding path program 89 times [2018-04-13 00:08:17,005 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:17,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:17,096 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:17,883 INFO L134 CoverageAnalysis]: Checked inductivity of 116556 backedges. 11840 proven. 4831 refuted. 0 times theorem prover too weak. 99885 trivial. 0 not checked. [2018-04-13 00:08:17,883 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:17,883 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:17,884 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:17,884 INFO L134 CoverageAnalysis]: Checked inductivity of 8484 backedges. 785 proven. 258 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:17,884 INFO L182 omatonBuilderFactory]: Interpolants [75841#(<= main_~i~1 15), 75840#(<= main_~i~1 14), 75843#(<= main_~i~1 17), 75842#(<= main_~i~1 16), 75844#(<= main_~i~1 18), 75823#false, 75822#true, 75825#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 75824#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 75827#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 75826#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 75829#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 75828#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 75831#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 75830#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 75833#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 75832#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 75835#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 75834#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 75837#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 75836#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 75839#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 75838#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14))] [2018-04-13 00:08:17,886 INFO L134 CoverageAnalysis]: Checked inductivity of 116556 backedges. 11840 proven. 4831 refuted. 0 times theorem prover too weak. 99885 trivial. 0 not checked. [2018-04-13 00:08:17,887 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:17,887 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:17,887 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=158, Invalid=348, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:17,887 INFO L87 Difference]: Start difference. First operand 425 states and 599 transitions. Second operand 23 states. [2018-04-13 00:08:18,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:18,176 INFO L93 Difference]: Finished difference Result 897 states and 1778 transitions. [2018-04-13 00:08:18,176 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2018-04-13 00:08:18,176 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1411 [2018-04-13 00:08:18,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:18,183 INFO L225 Difference]: With dead ends: 897 [2018-04-13 00:08:18,183 INFO L226 Difference]: Without dead ends: 897 [2018-04-13 00:08:18,184 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 189 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=428, Invalid=978, Unknown=0, NotChecked=0, Total=1406 [2018-04-13 00:08:18,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 897 states. [2018-04-13 00:08:18,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 897 to 425. [2018-04-13 00:08:18,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 425 states. [2018-04-13 00:08:18,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 599 transitions. [2018-04-13 00:08:18,200 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 599 transitions. Word has length 1411 [2018-04-13 00:08:18,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:18,201 INFO L459 AbstractCegarLoop]: Abstraction has 425 states and 599 transitions. [2018-04-13 00:08:18,201 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:18,201 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 599 transitions. [2018-04-13 00:08:18,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1418 [2018-04-13 00:08:18,209 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:18,210 INFO L355 BasicCegarLoop]: trace histogram [211, 189, 189, 189, 189, 189, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:18,210 INFO L408 AbstractCegarLoop]: === Iteration 101 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:18,210 INFO L82 PathProgramCache]: Analyzing trace with hash 153875347, now seen corresponding path program 90 times [2018-04-13 00:08:18,210 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:18,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:18,308 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:19,075 INFO L134 CoverageAnalysis]: Checked inductivity of 117728 backedges. 13951 proven. 3780 refuted. 0 times theorem prover too weak. 99997 trivial. 0 not checked. [2018-04-13 00:08:19,076 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:19,076 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:19,076 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:19,077 INFO L134 CoverageAnalysis]: Checked inductivity of 8502 backedges. 877 proven. 184 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:19,077 INFO L182 omatonBuilderFactory]: Interpolants [77217#(<= main_~i~1 16), 77216#(<= main_~i~1 15), 77219#(<= main_~i~1 18), 77218#(<= main_~i~1 17), 77197#true, 77199#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 77198#false, 77201#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 77200#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 77203#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 77202#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 77205#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 77204#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 77207#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 77206#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 77209#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 77208#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 77211#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 77210#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 77213#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 77212#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 77215#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 77214#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15))] [2018-04-13 00:08:19,079 INFO L134 CoverageAnalysis]: Checked inductivity of 117728 backedges. 13951 proven. 3780 refuted. 0 times theorem prover too weak. 99997 trivial. 0 not checked. [2018-04-13 00:08:19,079 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:19,079 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:19,079 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=337, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:19,080 INFO L87 Difference]: Start difference. First operand 425 states and 599 transitions. Second operand 23 states. [2018-04-13 00:08:19,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:19,373 INFO L93 Difference]: Finished difference Result 810 states and 1560 transitions. [2018-04-13 00:08:19,373 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2018-04-13 00:08:19,373 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1417 [2018-04-13 00:08:19,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:19,377 INFO L225 Difference]: With dead ends: 810 [2018-04-13 00:08:19,377 INFO L226 Difference]: Without dead ends: 810 [2018-04-13 00:08:19,377 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 195 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=473, Invalid=1009, Unknown=0, NotChecked=0, Total=1482 [2018-04-13 00:08:19,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 810 states. [2018-04-13 00:08:19,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 810 to 425. [2018-04-13 00:08:19,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 425 states. [2018-04-13 00:08:19,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 599 transitions. [2018-04-13 00:08:19,394 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 599 transitions. Word has length 1417 [2018-04-13 00:08:19,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:19,395 INFO L459 AbstractCegarLoop]: Abstraction has 425 states and 599 transitions. [2018-04-13 00:08:19,395 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:19,395 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 599 transitions. [2018-04-13 00:08:19,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1424 [2018-04-13 00:08:19,408 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:19,409 INFO L355 BasicCegarLoop]: trace histogram [212, 190, 190, 190, 190, 190, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:19,409 INFO L408 AbstractCegarLoop]: === Iteration 102 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:19,409 INFO L82 PathProgramCache]: Analyzing trace with hash -96349541, now seen corresponding path program 91 times [2018-04-13 00:08:19,410 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:19,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:19,505 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:20,290 INFO L134 CoverageAnalysis]: Checked inductivity of 118906 backedges. 16332 proven. 2459 refuted. 0 times theorem prover too weak. 100115 trivial. 0 not checked. [2018-04-13 00:08:20,290 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:20,290 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:20,291 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:20,291 INFO L134 CoverageAnalysis]: Checked inductivity of 8514 backedges. 975 proven. 98 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:20,292 INFO L182 omatonBuilderFactory]: Interpolants [78497#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 78496#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 78499#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 78498#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 78501#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 78500#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 78503#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 78502#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 78505#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 78504#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 78507#(<= main_~i~1 16), 78506#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 78509#(<= main_~i~1 18), 78508#(<= main_~i~1 17), 78487#true, 78489#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 78488#false, 78491#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 78490#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 78493#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 78492#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 78495#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 78494#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5))] [2018-04-13 00:08:20,294 INFO L134 CoverageAnalysis]: Checked inductivity of 118906 backedges. 16332 proven. 2459 refuted. 0 times theorem prover too weak. 100115 trivial. 0 not checked. [2018-04-13 00:08:20,294 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:20,294 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:20,294 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=324, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:20,295 INFO L87 Difference]: Start difference. First operand 425 states and 599 transitions. Second operand 23 states. [2018-04-13 00:08:20,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:20,600 INFO L93 Difference]: Finished difference Result 715 states and 1312 transitions. [2018-04-13 00:08:20,601 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2018-04-13 00:08:20,601 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1423 [2018-04-13 00:08:20,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:20,605 INFO L225 Difference]: With dead ends: 715 [2018-04-13 00:08:20,605 INFO L226 Difference]: Without dead ends: 715 [2018-04-13 00:08:20,605 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=522, Invalid=1038, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:08:20,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 715 states. [2018-04-13 00:08:20,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 715 to 425. [2018-04-13 00:08:20,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 425 states. [2018-04-13 00:08:20,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 599 transitions. [2018-04-13 00:08:20,617 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 599 transitions. Word has length 1423 [2018-04-13 00:08:20,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:20,618 INFO L459 AbstractCegarLoop]: Abstraction has 425 states and 599 transitions. [2018-04-13 00:08:20,618 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:20,618 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 599 transitions. [2018-04-13 00:08:20,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1430 [2018-04-13 00:08:20,626 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:20,627 INFO L355 BasicCegarLoop]: trace histogram [213, 191, 191, 191, 191, 191, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:20,627 INFO L408 AbstractCegarLoop]: === Iteration 103 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:20,627 INFO L82 PathProgramCache]: Analyzing trace with hash -1006292253, now seen corresponding path program 92 times [2018-04-13 00:08:20,628 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:20,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:20,686 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:21,534 INFO L134 CoverageAnalysis]: Checked inductivity of 120090 backedges. 19001 proven. 850 refuted. 0 times theorem prover too weak. 100239 trivial. 0 not checked. [2018-04-13 00:08:21,534 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:21,535 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:21,535 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:21,535 INFO L134 CoverageAnalysis]: Checked inductivity of 8520 backedges. 1079 proven. 0 refuted. 0 times theorem prover too weak. 7441 trivial. 0 not checked. [2018-04-13 00:08:21,535 INFO L182 omatonBuilderFactory]: Interpolants [79685#false, 79684#true, 79687#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 79686#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 79689#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 79688#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 79691#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 79690#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 79693#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 79692#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 79695#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 79694#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 79697#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 79696#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 79699#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 79698#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 79701#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 79700#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 79703#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 79702#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 79705#(<= main_~i~1 17), 79704#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 79706#(<= main_~i~1 18)] [2018-04-13 00:08:21,538 INFO L134 CoverageAnalysis]: Checked inductivity of 120090 backedges. 19001 proven. 850 refuted. 0 times theorem prover too weak. 100239 trivial. 0 not checked. [2018-04-13 00:08:21,538 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:21,538 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:21,538 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=309, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:21,538 INFO L87 Difference]: Start difference. First operand 425 states and 599 transitions. Second operand 23 states. [2018-04-13 00:08:21,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:21,944 INFO L93 Difference]: Finished difference Result 613 states and 1073 transitions. [2018-04-13 00:08:21,944 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-04-13 00:08:21,944 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1429 [2018-04-13 00:08:21,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:21,947 INFO L225 Difference]: With dead ends: 613 [2018-04-13 00:08:21,947 INFO L226 Difference]: Without dead ends: 613 [2018-04-13 00:08:21,947 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=575, Invalid=1065, Unknown=0, NotChecked=0, Total=1640 [2018-04-13 00:08:21,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 613 states. [2018-04-13 00:08:21,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 613 to 434. [2018-04-13 00:08:21,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 434 states. [2018-04-13 00:08:21,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 434 states to 434 states and 628 transitions. [2018-04-13 00:08:21,955 INFO L78 Accepts]: Start accepts. Automaton has 434 states and 628 transitions. Word has length 1429 [2018-04-13 00:08:21,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:21,956 INFO L459 AbstractCegarLoop]: Abstraction has 434 states and 628 transitions. [2018-04-13 00:08:21,956 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:21,956 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 628 transitions. [2018-04-13 00:08:21,964 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1436 [2018-04-13 00:08:21,964 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:21,965 INFO L355 BasicCegarLoop]: trace histogram [214, 192, 192, 192, 192, 192, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:21,965 INFO L408 AbstractCegarLoop]: === Iteration 104 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:21,965 INFO L82 PathProgramCache]: Analyzing trace with hash -493353877, now seen corresponding path program 93 times [2018-04-13 00:08:21,965 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:22,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:22,026 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:22,784 INFO L134 CoverageAnalysis]: Checked inductivity of 121280 backedges. 3806 proven. 8215 refuted. 0 times theorem prover too weak. 109259 trivial. 0 not checked. [2018-04-13 00:08:22,785 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:22,785 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:22,785 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:22,785 INFO L134 CoverageAnalysis]: Checked inductivity of 8517 backedges. 283 proven. 631 refuted. 0 times theorem prover too weak. 7603 trivial. 0 not checked. [2018-04-13 00:08:22,785 INFO L182 omatonBuilderFactory]: Interpolants [80801#(<= 9 main_~i~1), 80800#(<= 8 main_~i~1), 80803#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 80802#(<= 10 main_~i~1), 80805#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 80804#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 80807#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 80806#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 80809#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 80808#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 80811#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 80810#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 80813#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 9), 80812#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 80791#false, 80790#true, 80793#(<= 1 main_~i~1), 80792#(<= 0 main_~i~1), 80795#(<= 3 main_~i~1), 80794#(<= 2 main_~i~1), 80797#(<= 5 main_~i~1), 80796#(<= 4 main_~i~1), 80799#(<= 7 main_~i~1), 80798#(<= 6 main_~i~1)] [2018-04-13 00:08:22,788 INFO L134 CoverageAnalysis]: Checked inductivity of 121280 backedges. 3806 proven. 8215 refuted. 0 times theorem prover too weak. 109259 trivial. 0 not checked. [2018-04-13 00:08:22,788 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:22,788 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:22,788 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=407, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:22,788 INFO L87 Difference]: Start difference. First operand 434 states and 628 transitions. Second operand 24 states. [2018-04-13 00:08:23,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:23,215 INFO L93 Difference]: Finished difference Result 487 states and 678 transitions. [2018-04-13 00:08:23,215 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2018-04-13 00:08:23,215 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1435 [2018-04-13 00:08:23,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:23,217 INFO L225 Difference]: With dead ends: 487 [2018-04-13 00:08:23,217 INFO L226 Difference]: Without dead ends: 487 [2018-04-13 00:08:23,217 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=275, Invalid=847, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:08:23,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2018-04-13 00:08:23,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 437. [2018-04-13 00:08:23,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 437 states. [2018-04-13 00:08:23,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 437 states and 638 transitions. [2018-04-13 00:08:23,221 INFO L78 Accepts]: Start accepts. Automaton has 437 states and 638 transitions. Word has length 1435 [2018-04-13 00:08:23,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:23,221 INFO L459 AbstractCegarLoop]: Abstraction has 437 states and 638 transitions. [2018-04-13 00:08:23,222 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:23,222 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 638 transitions. [2018-04-13 00:08:23,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1472 [2018-04-13 00:08:23,230 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:23,230 INFO L355 BasicCegarLoop]: trace histogram [220, 198, 198, 198, 198, 198, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:23,230 INFO L408 AbstractCegarLoop]: === Iteration 105 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:23,230 INFO L82 PathProgramCache]: Analyzing trace with hash -2020762149, now seen corresponding path program 94 times [2018-04-13 00:08:23,231 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:23,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:23,283 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:23,981 INFO L134 CoverageAnalysis]: Checked inductivity of 128546 backedges. 0 proven. 1430 refuted. 0 times theorem prover too weak. 127116 trivial. 0 not checked. [2018-04-13 00:08:23,981 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:23,981 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:23,981 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:23,982 INFO L134 CoverageAnalysis]: Checked inductivity of 8805 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8805 trivial. 0 not checked. [2018-04-13 00:08:23,982 INFO L182 omatonBuilderFactory]: Interpolants [81759#false, 81758#true, 81761#(<= main_~i~1 1), 81760#(= main_~i~1 0), 81763#(<= main_~i~1 3), 81762#(<= main_~i~1 2), 81765#(<= main_~i~1 5), 81764#(<= main_~i~1 4), 81767#(<= main_~i~1 7), 81766#(<= main_~i~1 6), 81769#(<= main_~i~1 9), 81768#(<= main_~i~1 8), 81771#(<= main_~i~1 11), 81770#(<= main_~i~1 10), 81773#(<= main_~i~1 13), 81772#(<= main_~i~1 12), 81775#(<= main_~i~1 15), 81774#(<= main_~i~1 14), 81777#(<= main_~i~1 17), 81776#(<= main_~i~1 16), 81779#(<= main_~i~1 19), 81778#(<= main_~i~1 18), 81781#(<= main_~i~1 21), 81780#(<= main_~i~1 20), 81782#(<= main_~i~1 22)] [2018-04-13 00:08:23,984 INFO L134 CoverageAnalysis]: Checked inductivity of 128546 backedges. 0 proven. 1430 refuted. 0 times theorem prover too weak. 127116 trivial. 0 not checked. [2018-04-13 00:08:23,984 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:23,984 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:23,984 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=300, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:23,984 INFO L87 Difference]: Start difference. First operand 437 states and 638 transitions. Second operand 25 states. [2018-04-13 00:08:24,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:24,152 INFO L93 Difference]: Finished difference Result 740 states and 1109 transitions. [2018-04-13 00:08:24,152 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-04-13 00:08:24,152 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1471 [2018-04-13 00:08:24,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:24,155 INFO L225 Difference]: With dead ends: 740 [2018-04-13 00:08:24,155 INFO L226 Difference]: Without dead ends: 740 [2018-04-13 00:08:24,155 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=300, Invalid=300, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:24,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 740 states. [2018-04-13 00:08:24,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 740 to 448. [2018-04-13 00:08:24,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:24,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:24,165 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1471 [2018-04-13 00:08:24,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:24,166 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:24,166 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:24,166 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:24,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1544 [2018-04-13 00:08:24,181 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:24,182 INFO L355 BasicCegarLoop]: trace histogram [231, 208, 208, 208, 208, 208, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:24,182 INFO L408 AbstractCegarLoop]: === Iteration 106 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:24,182 INFO L82 PathProgramCache]: Analyzing trace with hash -1005294164, now seen corresponding path program 95 times [2018-04-13 00:08:24,182 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:24,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:24,276 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:25,145 INFO L134 CoverageAnalysis]: Checked inductivity of 141818 backedges. 7576 proven. 6320 refuted. 0 times theorem prover too weak. 127922 trivial. 0 not checked. [2018-04-13 00:08:25,145 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:25,145 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-13 00:08:25,146 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:25,146 INFO L134 CoverageAnalysis]: Checked inductivity of 9867 backedges. 670 proven. 372 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:25,146 INFO L182 omatonBuilderFactory]: Interpolants [82977#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 82976#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 82979#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 82978#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 82981#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 82980#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 82983#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 82982#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 82985#(<= main_~i~1 10), 82984#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 82987#(<= main_~i~1 12), 82986#(<= main_~i~1 11), 82989#(<= main_~i~1 14), 82988#(<= main_~i~1 13), 82991#(<= main_~i~1 16), 82990#(<= main_~i~1 15), 82992#(<= main_~i~1 17), 82971#true, 82973#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 82972#false, 82975#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 82974#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:08:25,149 INFO L134 CoverageAnalysis]: Checked inductivity of 141818 backedges. 7576 proven. 6320 refuted. 0 times theorem prover too weak. 127922 trivial. 0 not checked. [2018-04-13 00:08:25,149 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-13 00:08:25,149 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-13 00:08:25,149 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=338, Unknown=0, NotChecked=0, Total=462 [2018-04-13 00:08:25,149 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 22 states. [2018-04-13 00:08:25,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:25,408 INFO L93 Difference]: Finished difference Result 1147 states and 2284 transitions. [2018-04-13 00:08:25,408 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2018-04-13 00:08:25,408 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 1543 [2018-04-13 00:08:25,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:25,415 INFO L225 Difference]: With dead ends: 1147 [2018-04-13 00:08:25,415 INFO L226 Difference]: Without dead ends: 1147 [2018-04-13 00:08:25,415 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=278, Invalid=778, Unknown=0, NotChecked=0, Total=1056 [2018-04-13 00:08:25,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1147 states. [2018-04-13 00:08:25,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1147 to 451. [2018-04-13 00:08:25,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 451 states. [2018-04-13 00:08:25,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 680 transitions. [2018-04-13 00:08:25,431 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 680 transitions. Word has length 1543 [2018-04-13 00:08:25,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:25,431 INFO L459 AbstractCegarLoop]: Abstraction has 451 states and 680 transitions. [2018-04-13 00:08:25,432 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-13 00:08:25,432 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 680 transitions. [2018-04-13 00:08:25,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1550 [2018-04-13 00:08:25,441 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:25,442 INFO L355 BasicCegarLoop]: trace histogram [232, 209, 209, 209, 209, 209, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:25,442 INFO L408 AbstractCegarLoop]: === Iteration 107 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:25,442 INFO L82 PathProgramCache]: Analyzing trace with hash 1313614068, now seen corresponding path program 96 times [2018-04-13 00:08:25,442 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:25,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:25,503 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:26,337 INFO L134 CoverageAnalysis]: Checked inductivity of 143112 backedges. 8238 proven. 6952 refuted. 0 times theorem prover too weak. 127922 trivial. 0 not checked. [2018-04-13 00:08:26,337 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:26,337 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:26,337 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:26,338 INFO L134 CoverageAnalysis]: Checked inductivity of 9885 backedges. 652 proven. 408 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:26,338 INFO L182 omatonBuilderFactory]: Interpolants [84613#true, 84615#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 84614#false, 84617#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 84616#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 84619#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 84618#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 84621#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 84620#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 84623#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 84622#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 84625#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 84624#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 84627#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 84626#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 84629#(<= main_~i~1 12), 84628#(<= main_~i~1 11), 84631#(<= main_~i~1 14), 84630#(<= main_~i~1 13), 84633#(<= main_~i~1 16), 84632#(<= main_~i~1 15), 84635#(<= main_~i~1 18), 84634#(<= main_~i~1 17)] [2018-04-13 00:08:26,340 INFO L134 CoverageAnalysis]: Checked inductivity of 143112 backedges. 8238 proven. 6952 refuted. 0 times theorem prover too weak. 127922 trivial. 0 not checked. [2018-04-13 00:08:26,341 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:26,341 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:26,341 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=369, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:26,341 INFO L87 Difference]: Start difference. First operand 451 states and 680 transitions. Second operand 23 states. [2018-04-13 00:08:26,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:26,635 INFO L93 Difference]: Finished difference Result 1150 states and 2411 transitions. [2018-04-13 00:08:26,636 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2018-04-13 00:08:26,636 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1549 [2018-04-13 00:08:26,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:26,643 INFO L225 Difference]: With dead ends: 1150 [2018-04-13 00:08:26,643 INFO L226 Difference]: Without dead ends: 1150 [2018-04-13 00:08:26,643 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=317, Invalid=873, Unknown=0, NotChecked=0, Total=1190 [2018-04-13 00:08:26,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1150 states. [2018-04-13 00:08:26,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1150 to 451. [2018-04-13 00:08:26,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 451 states. [2018-04-13 00:08:26,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 680 transitions. [2018-04-13 00:08:26,661 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 680 transitions. Word has length 1549 [2018-04-13 00:08:26,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:26,662 INFO L459 AbstractCegarLoop]: Abstraction has 451 states and 680 transitions. [2018-04-13 00:08:26,662 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:26,662 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 680 transitions. [2018-04-13 00:08:26,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1556 [2018-04-13 00:08:26,672 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:26,673 INFO L355 BasicCegarLoop]: trace histogram [233, 210, 210, 210, 210, 210, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:26,673 INFO L408 AbstractCegarLoop]: === Iteration 108 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:26,673 INFO L82 PathProgramCache]: Analyzing trace with hash 558648892, now seen corresponding path program 97 times [2018-04-13 00:08:26,673 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:26,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:26,739 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:27,645 INFO L134 CoverageAnalysis]: Checked inductivity of 144412 backedges. 8900 proven. 7590 refuted. 0 times theorem prover too weak. 127922 trivial. 0 not checked. [2018-04-13 00:08:27,645 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:27,645 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:27,645 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:27,646 INFO L134 CoverageAnalysis]: Checked inductivity of 9921 backedges. 652 proven. 444 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:27,646 INFO L182 omatonBuilderFactory]: Interpolants [86273#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 86272#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 86275#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 86274#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 86277#(<= main_~i~1 12), 86276#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 86279#(<= main_~i~1 14), 86278#(<= main_~i~1 13), 86281#(<= main_~i~1 16), 86280#(<= main_~i~1 15), 86283#(<= main_~i~1 18), 86282#(<= main_~i~1 17), 86284#(<= main_~i~1 19), 86261#true, 86263#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 86262#false, 86265#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 86264#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 86267#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 86266#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 86269#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 86268#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 86271#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 86270#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7))] [2018-04-13 00:08:27,648 INFO L134 CoverageAnalysis]: Checked inductivity of 144412 backedges. 8900 proven. 7590 refuted. 0 times theorem prover too weak. 127922 trivial. 0 not checked. [2018-04-13 00:08:27,649 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:27,649 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:27,649 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=151, Invalid=401, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:27,649 INFO L87 Difference]: Start difference. First operand 451 states and 680 transitions. Second operand 24 states. [2018-04-13 00:08:27,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:27,964 INFO L93 Difference]: Finished difference Result 1150 states and 2411 transitions. [2018-04-13 00:08:27,964 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2018-04-13 00:08:27,964 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1555 [2018-04-13 00:08:27,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:27,971 INFO L225 Difference]: With dead ends: 1150 [2018-04-13 00:08:27,971 INFO L226 Difference]: Without dead ends: 1150 [2018-04-13 00:08:27,972 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=359, Invalid=973, Unknown=0, NotChecked=0, Total=1332 [2018-04-13 00:08:27,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1150 states. [2018-04-13 00:08:27,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1150 to 448. [2018-04-13 00:08:27,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:27,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:27,992 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1555 [2018-04-13 00:08:27,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:27,992 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:27,992 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:27,992 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:28,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1562 [2018-04-13 00:08:28,003 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:28,003 INFO L355 BasicCegarLoop]: trace histogram [234, 211, 211, 211, 211, 211, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:28,003 INFO L408 AbstractCegarLoop]: === Iteration 109 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:28,003 INFO L82 PathProgramCache]: Analyzing trace with hash -610443900, now seen corresponding path program 98 times [2018-04-13 00:08:28,004 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:28,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:28,077 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:28,964 INFO L134 CoverageAnalysis]: Checked inductivity of 145718 backedges. 10567 proven. 7129 refuted. 0 times theorem prover too weak. 128022 trivial. 0 not checked. [2018-04-13 00:08:28,965 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:28,965 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:28,965 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:28,965 INFO L134 CoverageAnalysis]: Checked inductivity of 9960 backedges. 735 proven. 400 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:28,966 INFO L182 omatonBuilderFactory]: Interpolants [87909#true, 87911#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 87910#false, 87913#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 87912#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 87915#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 87914#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 87917#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 87916#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 87919#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 87918#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 87921#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 87920#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 87923#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 87922#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 87925#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 87924#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 87927#(<= main_~i~1 14), 87926#(<= main_~i~1 13), 87929#(<= main_~i~1 16), 87928#(<= main_~i~1 15), 87931#(<= main_~i~1 18), 87930#(<= main_~i~1 17), 87932#(<= main_~i~1 19)] [2018-04-13 00:08:28,968 INFO L134 CoverageAnalysis]: Checked inductivity of 145718 backedges. 10567 proven. 7129 refuted. 0 times theorem prover too weak. 128022 trivial. 0 not checked. [2018-04-13 00:08:28,968 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:28,969 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:28,969 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=395, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:28,969 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 24 states. [2018-04-13 00:08:29,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:29,273 INFO L93 Difference]: Finished difference Result 1093 states and 2273 transitions. [2018-04-13 00:08:29,273 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2018-04-13 00:08:29,274 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1561 [2018-04-13 00:08:29,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:29,280 INFO L225 Difference]: With dead ends: 1093 [2018-04-13 00:08:29,280 INFO L226 Difference]: Without dead ends: 1093 [2018-04-13 00:08:29,281 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 195 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=395, Invalid=1011, Unknown=0, NotChecked=0, Total=1406 [2018-04-13 00:08:29,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1093 states. [2018-04-13 00:08:29,297 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1093 to 448. [2018-04-13 00:08:29,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:29,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:29,299 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1561 [2018-04-13 00:08:29,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:29,299 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:29,299 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:29,299 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:29,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1568 [2018-04-13 00:08:29,310 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:29,310 INFO L355 BasicCegarLoop]: trace histogram [235, 212, 212, 212, 212, 212, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:29,310 INFO L408 AbstractCegarLoop]: === Iteration 110 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:29,310 INFO L82 PathProgramCache]: Analyzing trace with hash 1165557260, now seen corresponding path program 99 times [2018-04-13 00:08:29,311 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:29,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:29,377 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:30,197 INFO L134 CoverageAnalysis]: Checked inductivity of 147030 backedges. 12468 proven. 6434 refuted. 0 times theorem prover too weak. 128128 trivial. 0 not checked. [2018-04-13 00:08:30,197 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:30,198 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:30,198 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:30,198 INFO L134 CoverageAnalysis]: Checked inductivity of 9990 backedges. 821 proven. 344 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:30,198 INFO L182 omatonBuilderFactory]: Interpolants [89505#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 89504#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 89507#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 89506#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 89509#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 89508#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 89511#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 89510#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 89513#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 89512#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 89515#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 89514#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 89517#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 89516#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 89519#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 89518#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 89521#(<= main_~i~1 15), 89520#(<= main_~i~1 14), 89523#(<= main_~i~1 17), 89522#(<= main_~i~1 16), 89525#(<= main_~i~1 19), 89524#(<= main_~i~1 18), 89503#false, 89502#true] [2018-04-13 00:08:30,201 INFO L134 CoverageAnalysis]: Checked inductivity of 147030 backedges. 12468 proven. 6434 refuted. 0 times theorem prover too weak. 128128 trivial. 0 not checked. [2018-04-13 00:08:30,201 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:30,201 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:30,201 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=165, Invalid=387, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:30,201 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 24 states. [2018-04-13 00:08:30,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:30,489 INFO L93 Difference]: Finished difference Result 1024 states and 2103 transitions. [2018-04-13 00:08:30,489 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2018-04-13 00:08:30,489 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1567 [2018-04-13 00:08:30,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:30,494 INFO L225 Difference]: With dead ends: 1024 [2018-04-13 00:08:30,494 INFO L226 Difference]: Without dead ends: 1024 [2018-04-13 00:08:30,495 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 203 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=435, Invalid=1047, Unknown=0, NotChecked=0, Total=1482 [2018-04-13 00:08:30,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1024 states. [2018-04-13 00:08:30,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1024 to 448. [2018-04-13 00:08:30,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:30,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:30,509 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1567 [2018-04-13 00:08:30,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:30,509 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:30,509 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:30,509 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:30,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1574 [2018-04-13 00:08:30,519 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:30,519 INFO L355 BasicCegarLoop]: trace histogram [236, 213, 213, 213, 213, 213, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:30,519 INFO L408 AbstractCegarLoop]: === Iteration 111 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:30,520 INFO L82 PathProgramCache]: Analyzing trace with hash 1683607508, now seen corresponding path program 100 times [2018-04-13 00:08:30,520 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:30,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:30,579 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:31,483 INFO L134 CoverageAnalysis]: Checked inductivity of 148348 backedges. 14621 proven. 5487 refuted. 0 times theorem prover too weak. 128240 trivial. 0 not checked. [2018-04-13 00:08:31,483 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:31,483 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:31,483 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:31,484 INFO L134 CoverageAnalysis]: Checked inductivity of 10014 backedges. 913 proven. 276 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:31,484 INFO L182 omatonBuilderFactory]: Interpolants [91041#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 91040#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 91043#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 91042#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 91045#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 91044#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 91047#(<= main_~i~1 15), 91046#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 91049#(<= main_~i~1 17), 91048#(<= main_~i~1 16), 91051#(<= main_~i~1 19), 91050#(<= main_~i~1 18), 91029#false, 91028#true, 91031#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 91030#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 91033#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 91032#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 91035#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 91034#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 91037#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 91036#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 91039#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 91038#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8))] [2018-04-13 00:08:31,487 INFO L134 CoverageAnalysis]: Checked inductivity of 148348 backedges. 14621 proven. 5487 refuted. 0 times theorem prover too weak. 128240 trivial. 0 not checked. [2018-04-13 00:08:31,487 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:31,487 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:31,487 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=175, Invalid=377, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:31,487 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 24 states. [2018-04-13 00:08:31,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:31,799 INFO L93 Difference]: Finished difference Result 943 states and 1900 transitions. [2018-04-13 00:08:31,800 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2018-04-13 00:08:31,800 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1573 [2018-04-13 00:08:31,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:31,804 INFO L225 Difference]: With dead ends: 943 [2018-04-13 00:08:31,804 INFO L226 Difference]: Without dead ends: 943 [2018-04-13 00:08:31,805 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 210 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=479, Invalid=1081, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:08:31,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 943 states. [2018-04-13 00:08:31,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 943 to 448. [2018-04-13 00:08:31,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:31,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:31,816 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1573 [2018-04-13 00:08:31,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:31,816 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:31,817 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:31,817 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:31,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1580 [2018-04-13 00:08:31,826 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:31,827 INFO L355 BasicCegarLoop]: trace histogram [237, 214, 214, 214, 214, 214, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:31,827 INFO L408 AbstractCegarLoop]: === Iteration 112 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:31,827 INFO L82 PathProgramCache]: Analyzing trace with hash 2003624668, now seen corresponding path program 101 times [2018-04-13 00:08:31,827 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:31,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:31,887 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:32,763 INFO L134 CoverageAnalysis]: Checked inductivity of 149672 backedges. 17044 proven. 4270 refuted. 0 times theorem prover too weak. 128358 trivial. 0 not checked. [2018-04-13 00:08:32,763 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:32,763 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:32,763 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:32,764 INFO L134 CoverageAnalysis]: Checked inductivity of 10032 backedges. 1011 proven. 196 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:32,764 INFO L182 omatonBuilderFactory]: Interpolants [92481#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 92480#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 92483#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 92482#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 92485#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 92484#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 92487#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 92486#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 92489#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 92488#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 92491#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 92490#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 92493#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 92492#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 92495#(<= main_~i~1 16), 92494#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 92497#(<= main_~i~1 18), 92496#(<= main_~i~1 17), 92498#(<= main_~i~1 19), 92475#true, 92477#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 92476#false, 92479#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 92478#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:08:32,766 INFO L134 CoverageAnalysis]: Checked inductivity of 149672 backedges. 17044 proven. 4270 refuted. 0 times theorem prover too weak. 128358 trivial. 0 not checked. [2018-04-13 00:08:32,767 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:32,767 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:32,767 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=365, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:32,767 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 24 states. [2018-04-13 00:08:33,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:33,098 INFO L93 Difference]: Finished difference Result 850 states and 1663 transitions. [2018-04-13 00:08:33,098 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-04-13 00:08:33,098 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1579 [2018-04-13 00:08:33,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:33,101 INFO L225 Difference]: With dead ends: 850 [2018-04-13 00:08:33,101 INFO L226 Difference]: Without dead ends: 850 [2018-04-13 00:08:33,101 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 216 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=527, Invalid=1113, Unknown=0, NotChecked=0, Total=1640 [2018-04-13 00:08:33,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 850 states. [2018-04-13 00:08:33,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 850 to 448. [2018-04-13 00:08:33,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:33,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:33,111 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1579 [2018-04-13 00:08:33,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:33,111 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:33,111 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:33,111 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:33,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1586 [2018-04-13 00:08:33,121 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:33,121 INFO L355 BasicCegarLoop]: trace histogram [238, 215, 215, 215, 215, 215, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:33,121 INFO L408 AbstractCegarLoop]: === Iteration 113 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:33,121 INFO L82 PathProgramCache]: Analyzing trace with hash 398309156, now seen corresponding path program 102 times [2018-04-13 00:08:33,122 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:33,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:33,207 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:34,059 INFO L134 CoverageAnalysis]: Checked inductivity of 151002 backedges. 19755 proven. 2765 refuted. 0 times theorem prover too weak. 128482 trivial. 0 not checked. [2018-04-13 00:08:34,059 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:34,060 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:34,060 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:34,060 INFO L134 CoverageAnalysis]: Checked inductivity of 10044 backedges. 1115 proven. 104 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:34,060 INFO L182 omatonBuilderFactory]: Interpolants [93831#true, 93833#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 93832#false, 93835#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 93834#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 93837#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 93836#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 93839#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 93838#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 93841#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 93840#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 93843#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 93842#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 93845#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 93844#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 93847#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 93846#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 93849#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 93848#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 93851#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 93850#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 93853#(<= main_~i~1 18), 93852#(<= main_~i~1 17), 93854#(<= main_~i~1 19)] [2018-04-13 00:08:34,063 INFO L134 CoverageAnalysis]: Checked inductivity of 151002 backedges. 19755 proven. 2765 refuted. 0 times theorem prover too weak. 128482 trivial. 0 not checked. [2018-04-13 00:08:34,063 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:34,063 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:34,063 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=351, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:34,063 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 24 states. [2018-04-13 00:08:34,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:34,394 INFO L93 Difference]: Finished difference Result 749 states and 1395 transitions. [2018-04-13 00:08:34,395 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:08:34,395 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1585 [2018-04-13 00:08:34,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:34,398 INFO L225 Difference]: With dead ends: 749 [2018-04-13 00:08:34,398 INFO L226 Difference]: Without dead ends: 749 [2018-04-13 00:08:34,398 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 221 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=579, Invalid=1143, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:08:34,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 749 states. [2018-04-13 00:08:34,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 749 to 448. [2018-04-13 00:08:34,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2018-04-13 00:08:34,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 657 transitions. [2018-04-13 00:08:34,407 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 657 transitions. Word has length 1585 [2018-04-13 00:08:34,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:34,408 INFO L459 AbstractCegarLoop]: Abstraction has 448 states and 657 transitions. [2018-04-13 00:08:34,408 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:34,408 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 657 transitions. [2018-04-13 00:08:34,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1592 [2018-04-13 00:08:34,418 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:34,418 INFO L355 BasicCegarLoop]: trace histogram [239, 216, 216, 216, 216, 216, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:34,418 INFO L408 AbstractCegarLoop]: === Iteration 114 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:34,418 INFO L82 PathProgramCache]: Analyzing trace with hash -1407304532, now seen corresponding path program 103 times [2018-04-13 00:08:34,419 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:34,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:34,482 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:35,427 INFO L134 CoverageAnalysis]: Checked inductivity of 152338 backedges. 22772 proven. 954 refuted. 0 times theorem prover too weak. 128612 trivial. 0 not checked. [2018-04-13 00:08:35,427 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:35,427 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:35,427 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:35,428 INFO L134 CoverageAnalysis]: Checked inductivity of 10050 backedges. 1225 proven. 0 refuted. 0 times theorem prover too weak. 8825 trivial. 0 not checked. [2018-04-13 00:08:35,428 INFO L182 omatonBuilderFactory]: Interpolants [95105#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 95104#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 95107#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 95106#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 95109#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 95108#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 95111#(<= main_~i~1 19), 95110#(<= main_~i~1 18), 95089#false, 95088#true, 95091#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 95090#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 95093#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 95092#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 95095#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 95094#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 95097#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 95096#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 95099#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 95098#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 95101#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 95100#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 95103#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 95102#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:08:35,430 INFO L134 CoverageAnalysis]: Checked inductivity of 152338 backedges. 22772 proven. 954 refuted. 0 times theorem prover too weak. 128612 trivial. 0 not checked. [2018-04-13 00:08:35,431 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:35,431 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:35,431 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=335, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:35,431 INFO L87 Difference]: Start difference. First operand 448 states and 657 transitions. Second operand 24 states. [2018-04-13 00:08:35,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:35,691 INFO L93 Difference]: Finished difference Result 641 states and 1137 transitions. [2018-04-13 00:08:35,712 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2018-04-13 00:08:35,712 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1591 [2018-04-13 00:08:35,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:35,715 INFO L225 Difference]: With dead ends: 641 [2018-04-13 00:08:35,715 INFO L226 Difference]: Without dead ends: 641 [2018-04-13 00:08:35,715 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 225 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=635, Invalid=1171, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:08:35,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 641 states. [2018-04-13 00:08:35,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 641 to 457. [2018-04-13 00:08:35,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 457 states. [2018-04-13 00:08:35,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 457 states to 457 states and 687 transitions. [2018-04-13 00:08:35,722 INFO L78 Accepts]: Start accepts. Automaton has 457 states and 687 transitions. Word has length 1591 [2018-04-13 00:08:35,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:35,723 INFO L459 AbstractCegarLoop]: Abstraction has 457 states and 687 transitions. [2018-04-13 00:08:35,723 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:35,723 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 687 transitions. [2018-04-13 00:08:35,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1598 [2018-04-13 00:08:35,733 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:35,733 INFO L355 BasicCegarLoop]: trace histogram [240, 217, 217, 217, 217, 217, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:35,733 INFO L408 AbstractCegarLoop]: === Iteration 115 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:35,733 INFO L82 PathProgramCache]: Analyzing trace with hash 885707636, now seen corresponding path program 104 times [2018-04-13 00:08:35,734 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:35,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:35,800 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:36,650 INFO L134 CoverageAnalysis]: Checked inductivity of 153680 backedges. 0 proven. 1564 refuted. 0 times theorem prover too weak. 152116 trivial. 0 not checked. [2018-04-13 00:08:36,651 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:36,651 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:08:36,651 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:36,652 INFO L134 CoverageAnalysis]: Checked inductivity of 10047 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10047 trivial. 0 not checked. [2018-04-13 00:08:36,652 INFO L182 omatonBuilderFactory]: Interpolants [96257#(<= main_~i~1 7), 96256#(<= main_~i~1 6), 96259#(<= main_~i~1 9), 96258#(<= main_~i~1 8), 96261#(<= main_~i~1 11), 96260#(<= main_~i~1 10), 96263#(<= main_~i~1 13), 96262#(<= main_~i~1 12), 96265#(<= main_~i~1 15), 96264#(<= main_~i~1 14), 96267#(<= main_~i~1 17), 96266#(<= main_~i~1 16), 96269#(<= main_~i~1 19), 96268#(<= main_~i~1 18), 96271#(<= main_~i~1 21), 96270#(<= main_~i~1 20), 96273#(<= main_~i~1 23), 96272#(<= main_~i~1 22), 96249#false, 96248#true, 96251#(<= main_~i~1 1), 96250#(= main_~i~1 0), 96253#(<= main_~i~1 3), 96252#(<= main_~i~1 2), 96255#(<= main_~i~1 5), 96254#(<= main_~i~1 4)] [2018-04-13 00:08:36,654 INFO L134 CoverageAnalysis]: Checked inductivity of 153680 backedges. 0 proven. 1564 refuted. 0 times theorem prover too weak. 152116 trivial. 0 not checked. [2018-04-13 00:08:36,654 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:08:36,654 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:08:36,655 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=325, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:08:36,655 INFO L87 Difference]: Start difference. First operand 457 states and 687 transitions. Second operand 26 states. [2018-04-13 00:08:36,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:36,842 INFO L93 Difference]: Finished difference Result 815 states and 1303 transitions. [2018-04-13 00:08:36,842 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-04-13 00:08:36,842 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1597 [2018-04-13 00:08:36,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:36,845 INFO L225 Difference]: With dead ends: 815 [2018-04-13 00:08:36,846 INFO L226 Difference]: Without dead ends: 815 [2018-04-13 00:08:36,846 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=325, Invalid=325, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:08:36,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 815 states. [2018-04-13 00:08:36,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 815 to 468. [2018-04-13 00:08:36,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:36,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:36,854 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1597 [2018-04-13 00:08:36,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:36,855 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:36,855 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:08:36,855 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:36,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1670 [2018-04-13 00:08:36,866 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:36,866 INFO L355 BasicCegarLoop]: trace histogram [251, 227, 227, 227, 227, 227, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:36,866 INFO L408 AbstractCegarLoop]: === Iteration 116 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:36,866 INFO L82 PathProgramCache]: Analyzing trace with hash -396143739, now seen corresponding path program 105 times [2018-04-13 00:08:36,866 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:36,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:36,933 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:37,854 INFO L134 CoverageAnalysis]: Checked inductivity of 168162 backedges. 7676 proven. 7563 refuted. 0 times theorem prover too weak. 152923 trivial. 0 not checked. [2018-04-13 00:08:37,854 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:37,854 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-13 00:08:37,854 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:37,855 INFO L134 CoverageAnalysis]: Checked inductivity of 11172 backedges. 670 proven. 434 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:37,855 INFO L182 omatonBuilderFactory]: Interpolants [97569#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 97568#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 97571#(<= main_~i~1 10), 97570#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10), 97573#(<= main_~i~1 12), 97572#(<= main_~i~1 11), 97575#(<= main_~i~1 14), 97574#(<= main_~i~1 13), 97577#(<= main_~i~1 16), 97576#(<= main_~i~1 15), 97579#(<= main_~i~1 18), 97578#(<= main_~i~1 17), 97557#true, 97559#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 97558#false, 97561#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 97560#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 97563#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 97562#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 97565#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 97564#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 97567#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 97566#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7))] [2018-04-13 00:08:37,858 INFO L134 CoverageAnalysis]: Checked inductivity of 168162 backedges. 7676 proven. 7563 refuted. 0 times theorem prover too weak. 152923 trivial. 0 not checked. [2018-04-13 00:08:37,858 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-13 00:08:37,858 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-13 00:08:37,858 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=134, Invalid=372, Unknown=0, NotChecked=0, Total=506 [2018-04-13 00:08:37,858 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 23 states. [2018-04-13 00:08:38,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:38,127 INFO L93 Difference]: Finished difference Result 1262 states and 2668 transitions. [2018-04-13 00:08:38,127 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2018-04-13 00:08:38,127 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 1669 [2018-04-13 00:08:38,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:38,134 INFO L225 Difference]: With dead ends: 1262 [2018-04-13 00:08:38,134 INFO L226 Difference]: Without dead ends: 1262 [2018-04-13 00:08:38,134 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 155 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=288, Invalid=834, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:08:38,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1262 states. [2018-04-13 00:08:38,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1262 to 471. [2018-04-13 00:08:38,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 471 states. [2018-04-13 00:08:38,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 471 states to 471 states and 731 transitions. [2018-04-13 00:08:38,152 INFO L78 Accepts]: Start accepts. Automaton has 471 states and 731 transitions. Word has length 1669 [2018-04-13 00:08:38,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:38,153 INFO L459 AbstractCegarLoop]: Abstraction has 471 states and 731 transitions. [2018-04-13 00:08:38,153 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-13 00:08:38,153 INFO L276 IsEmpty]: Start isEmpty. Operand 471 states and 731 transitions. [2018-04-13 00:08:38,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1676 [2018-04-13 00:08:38,164 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:38,164 INFO L355 BasicCegarLoop]: trace histogram [252, 228, 228, 228, 228, 228, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:38,164 INFO L408 AbstractCegarLoop]: === Iteration 117 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:38,165 INFO L82 PathProgramCache]: Analyzing trace with hash -62603059, now seen corresponding path program 106 times [2018-04-13 00:08:38,165 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:38,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:38,236 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:39,204 INFO L134 CoverageAnalysis]: Checked inductivity of 169572 backedges. 8338 proven. 8311 refuted. 0 times theorem prover too weak. 152923 trivial. 0 not checked. [2018-04-13 00:08:39,205 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:39,205 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-13 00:08:39,205 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:39,205 INFO L134 CoverageAnalysis]: Checked inductivity of 11196 backedges. 652 proven. 476 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:39,206 INFO L182 omatonBuilderFactory]: Interpolants [99335#true, 99337#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 99336#false, 99339#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 99338#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 99341#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 99340#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 99343#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 99342#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 99345#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 99344#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 99347#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 99346#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 99349#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 99348#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 99351#(<= main_~i~1 12), 99350#(<= main_~i~1 11), 99353#(<= main_~i~1 14), 99352#(<= main_~i~1 13), 99355#(<= main_~i~1 16), 99354#(<= main_~i~1 15), 99357#(<= main_~i~1 18), 99356#(<= main_~i~1 17), 99358#(<= main_~i~1 19)] [2018-04-13 00:08:39,208 INFO L134 CoverageAnalysis]: Checked inductivity of 169572 backedges. 8338 proven. 8311 refuted. 0 times theorem prover too weak. 152923 trivial. 0 not checked. [2018-04-13 00:08:39,209 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-13 00:08:39,209 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-13 00:08:39,209 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=147, Invalid=405, Unknown=0, NotChecked=0, Total=552 [2018-04-13 00:08:39,209 INFO L87 Difference]: Start difference. First operand 471 states and 731 transitions. Second operand 24 states. [2018-04-13 00:08:39,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:39,514 INFO L93 Difference]: Finished difference Result 1265 states and 2811 transitions. [2018-04-13 00:08:39,514 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-04-13 00:08:39,514 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 1675 [2018-04-13 00:08:39,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:39,522 INFO L225 Difference]: With dead ends: 1265 [2018-04-13 00:08:39,522 INFO L226 Difference]: Without dead ends: 1265 [2018-04-13 00:08:39,522 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 176 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=327, Invalid=933, Unknown=0, NotChecked=0, Total=1260 [2018-04-13 00:08:39,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1265 states. [2018-04-13 00:08:39,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1265 to 471. [2018-04-13 00:08:39,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 471 states. [2018-04-13 00:08:39,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 471 states to 471 states and 731 transitions. [2018-04-13 00:08:39,545 INFO L78 Accepts]: Start accepts. Automaton has 471 states and 731 transitions. Word has length 1675 [2018-04-13 00:08:39,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:39,545 INFO L459 AbstractCegarLoop]: Abstraction has 471 states and 731 transitions. [2018-04-13 00:08:39,545 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-13 00:08:39,545 INFO L276 IsEmpty]: Start isEmpty. Operand 471 states and 731 transitions. [2018-04-13 00:08:39,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1682 [2018-04-13 00:08:39,556 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:39,557 INFO L355 BasicCegarLoop]: trace histogram [253, 229, 229, 229, 229, 229, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:39,557 INFO L408 AbstractCegarLoop]: === Iteration 118 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:39,557 INFO L82 PathProgramCache]: Analyzing trace with hash -882829291, now seen corresponding path program 107 times [2018-04-13 00:08:39,557 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:39,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:39,627 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:40,613 INFO L134 CoverageAnalysis]: Checked inductivity of 170988 backedges. 9000 proven. 9065 refuted. 0 times theorem prover too weak. 152923 trivial. 0 not checked. [2018-04-13 00:08:40,613 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:40,614 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:40,614 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:40,614 INFO L134 CoverageAnalysis]: Checked inductivity of 11238 backedges. 652 proven. 518 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:40,614 INFO L182 omatonBuilderFactory]: Interpolants [101121#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 101120#false, 101123#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 101122#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 101125#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 101124#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 101127#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 101126#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 101129#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 101128#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 101131#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 101130#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 101133#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 101132#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 101135#(<= main_~i~1 12), 101134#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 101137#(<= main_~i~1 14), 101136#(<= main_~i~1 13), 101139#(<= main_~i~1 16), 101138#(<= main_~i~1 15), 101141#(<= main_~i~1 18), 101140#(<= main_~i~1 17), 101143#(<= main_~i~1 20), 101142#(<= main_~i~1 19), 101119#true] [2018-04-13 00:08:40,617 INFO L134 CoverageAnalysis]: Checked inductivity of 170988 backedges. 9000 proven. 9065 refuted. 0 times theorem prover too weak. 152923 trivial. 0 not checked. [2018-04-13 00:08:40,617 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:40,618 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:40,618 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=161, Invalid=439, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:40,618 INFO L87 Difference]: Start difference. First operand 471 states and 731 transitions. Second operand 25 states. [2018-04-13 00:08:40,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:40,932 INFO L93 Difference]: Finished difference Result 1265 states and 2811 transitions. [2018-04-13 00:08:40,932 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2018-04-13 00:08:40,933 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1681 [2018-04-13 00:08:40,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:40,940 INFO L225 Difference]: With dead ends: 1265 [2018-04-13 00:08:40,940 INFO L226 Difference]: Without dead ends: 1265 [2018-04-13 00:08:40,940 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 198 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=369, Invalid=1037, Unknown=0, NotChecked=0, Total=1406 [2018-04-13 00:08:40,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1265 states. [2018-04-13 00:08:40,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1265 to 468. [2018-04-13 00:08:40,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:40,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:40,959 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1681 [2018-04-13 00:08:40,960 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:40,960 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:40,960 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:40,960 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:40,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1688 [2018-04-13 00:08:40,971 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:40,971 INFO L355 BasicCegarLoop]: trace histogram [254, 230, 230, 230, 230, 230, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:40,971 INFO L408 AbstractCegarLoop]: === Iteration 119 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:40,972 INFO L82 PathProgramCache]: Analyzing trace with hash -194979491, now seen corresponding path program 108 times [2018-04-13 00:08:40,972 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:41,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:41,038 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:41,969 INFO L134 CoverageAnalysis]: Checked inductivity of 172410 backedges. 10673 proven. 8714 refuted. 0 times theorem prover too weak. 153023 trivial. 0 not checked. [2018-04-13 00:08:41,969 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:41,969 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:41,969 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:41,970 INFO L134 CoverageAnalysis]: Checked inductivity of 11283 backedges. 735 proven. 480 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:41,970 INFO L182 omatonBuilderFactory]: Interpolants [102913#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 102912#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 102915#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 102914#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 102917#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 102916#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 102919#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 102918#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 102921#(<= main_~i~1 14), 102920#(<= main_~i~1 13), 102923#(<= main_~i~1 16), 102922#(<= main_~i~1 15), 102925#(<= main_~i~1 18), 102924#(<= main_~i~1 17), 102927#(<= main_~i~1 20), 102926#(<= main_~i~1 19), 102903#true, 102905#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 102904#false, 102907#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 102906#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 102909#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 102908#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 102911#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 102910#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5))] [2018-04-13 00:08:41,973 INFO L134 CoverageAnalysis]: Checked inductivity of 172410 backedges. 10673 proven. 8714 refuted. 0 times theorem prover too weak. 153023 trivial. 0 not checked. [2018-04-13 00:08:41,973 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:41,973 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:41,973 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=434, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:41,973 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:42,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:42,255 INFO L93 Difference]: Finished difference Result 1214 states and 2681 transitions. [2018-04-13 00:08:42,256 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2018-04-13 00:08:42,256 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1687 [2018-04-13 00:08:42,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:42,261 INFO L225 Difference]: With dead ends: 1214 [2018-04-13 00:08:42,261 INFO L226 Difference]: Without dead ends: 1214 [2018-04-13 00:08:42,262 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=404, Invalid=1078, Unknown=0, NotChecked=0, Total=1482 [2018-04-13 00:08:42,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1214 states. [2018-04-13 00:08:42,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1214 to 468. [2018-04-13 00:08:42,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:42,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:42,279 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1687 [2018-04-13 00:08:42,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:42,279 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:42,279 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:42,279 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:42,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1694 [2018-04-13 00:08:42,290 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:42,290 INFO L355 BasicCegarLoop]: trace histogram [255, 231, 231, 231, 231, 231, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:42,290 INFO L408 AbstractCegarLoop]: === Iteration 120 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:42,290 INFO L82 PathProgramCache]: Analyzing trace with hash -1517650971, now seen corresponding path program 109 times [2018-04-13 00:08:42,291 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:42,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:42,353 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:43,314 INFO L134 CoverageAnalysis]: Checked inductivity of 173838 backedges. 12580 proven. 8129 refuted. 0 times theorem prover too weak. 153129 trivial. 0 not checked. [2018-04-13 00:08:43,314 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:43,314 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:43,314 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:43,315 INFO L134 CoverageAnalysis]: Checked inductivity of 11319 backedges. 821 proven. 430 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:43,315 INFO L182 omatonBuilderFactory]: Interpolants [104641#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 104640#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 104643#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 104642#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 104645#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 104644#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 104647#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 104646#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 104649#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 104648#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 104651#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 104650#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 104653#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 104652#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 104655#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 104654#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 104657#(<= main_~i~1 15), 104656#(<= main_~i~1 14), 104659#(<= main_~i~1 17), 104658#(<= main_~i~1 16), 104661#(<= main_~i~1 19), 104660#(<= main_~i~1 18), 104662#(<= main_~i~1 20), 104639#false, 104638#true] [2018-04-13 00:08:43,318 INFO L134 CoverageAnalysis]: Checked inductivity of 173838 backedges. 12580 proven. 8129 refuted. 0 times theorem prover too weak. 153129 trivial. 0 not checked. [2018-04-13 00:08:43,318 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:43,318 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:43,318 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=173, Invalid=427, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:43,318 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:43,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:43,660 INFO L93 Difference]: Finished difference Result 1151 states and 2518 transitions. [2018-04-13 00:08:43,660 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2018-04-13 00:08:43,660 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1693 [2018-04-13 00:08:43,660 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:43,666 INFO L225 Difference]: With dead ends: 1151 [2018-04-13 00:08:43,666 INFO L226 Difference]: Without dead ends: 1151 [2018-04-13 00:08:43,666 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 217 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=443, Invalid=1117, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:08:43,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1151 states. [2018-04-13 00:08:43,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1151 to 468. [2018-04-13 00:08:43,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:43,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:43,682 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1693 [2018-04-13 00:08:43,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:43,683 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:43,683 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:43,683 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:43,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1700 [2018-04-13 00:08:43,694 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:43,694 INFO L355 BasicCegarLoop]: trace histogram [256, 232, 232, 232, 232, 232, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:43,694 INFO L408 AbstractCegarLoop]: === Iteration 121 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:43,695 INFO L82 PathProgramCache]: Analyzing trace with hash 2021695405, now seen corresponding path program 110 times [2018-04-13 00:08:43,695 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:43,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:43,765 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:44,852 INFO L134 CoverageAnalysis]: Checked inductivity of 175272 backedges. 14739 proven. 7292 refuted. 0 times theorem prover too weak. 153241 trivial. 0 not checked. [2018-04-13 00:08:44,853 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:44,853 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:44,853 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:44,854 INFO L134 CoverageAnalysis]: Checked inductivity of 11349 backedges. 913 proven. 368 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:44,854 INFO L182 omatonBuilderFactory]: Interpolants [106313#false, 106312#true, 106315#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 106314#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 106317#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 106316#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 106319#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 106318#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 106321#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 106320#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 106323#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 106322#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 106325#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 106324#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 106327#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 106326#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 106329#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 106328#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 106331#(<= main_~i~1 15), 106330#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 106333#(<= main_~i~1 17), 106332#(<= main_~i~1 16), 106335#(<= main_~i~1 19), 106334#(<= main_~i~1 18), 106336#(<= main_~i~1 20)] [2018-04-13 00:08:44,857 INFO L134 CoverageAnalysis]: Checked inductivity of 175272 backedges. 14739 proven. 7292 refuted. 0 times theorem prover too weak. 153241 trivial. 0 not checked. [2018-04-13 00:08:44,857 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:44,857 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:44,858 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=418, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:44,858 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:45,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:45,214 INFO L93 Difference]: Finished difference Result 1076 states and 2321 transitions. [2018-04-13 00:08:45,214 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-04-13 00:08:45,214 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1699 [2018-04-13 00:08:45,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:45,221 INFO L225 Difference]: With dead ends: 1076 [2018-04-13 00:08:45,221 INFO L226 Difference]: Without dead ends: 1076 [2018-04-13 00:08:45,221 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 225 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=486, Invalid=1154, Unknown=0, NotChecked=0, Total=1640 [2018-04-13 00:08:45,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1076 states. [2018-04-13 00:08:45,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1076 to 468. [2018-04-13 00:08:45,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:45,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:45,239 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1699 [2018-04-13 00:08:45,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:45,239 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:45,239 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:45,239 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:45,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1706 [2018-04-13 00:08:45,251 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:45,251 INFO L355 BasicCegarLoop]: trace histogram [257, 233, 233, 233, 233, 233, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:45,251 INFO L408 AbstractCegarLoop]: === Iteration 122 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:45,251 INFO L82 PathProgramCache]: Analyzing trace with hash -1821092683, now seen corresponding path program 111 times [2018-04-13 00:08:45,252 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:45,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:45,362 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:46,484 INFO L134 CoverageAnalysis]: Checked inductivity of 176712 backedges. 17168 proven. 6185 refuted. 0 times theorem prover too weak. 153359 trivial. 0 not checked. [2018-04-13 00:08:46,485 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:46,485 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:46,485 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:46,486 INFO L134 CoverageAnalysis]: Checked inductivity of 11373 backedges. 1011 proven. 294 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:46,486 INFO L182 omatonBuilderFactory]: Interpolants [107913#true, 107915#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 107914#false, 107917#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 107916#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 107919#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 107918#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 107921#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 107920#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 107923#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 107922#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 107925#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 107924#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 107927#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 107926#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 107929#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 107928#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 107931#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 107930#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 107933#(<= main_~i~1 16), 107932#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 107935#(<= main_~i~1 18), 107934#(<= main_~i~1 17), 107937#(<= main_~i~1 20), 107936#(<= main_~i~1 19)] [2018-04-13 00:08:46,489 INFO L134 CoverageAnalysis]: Checked inductivity of 176712 backedges. 17168 proven. 6185 refuted. 0 times theorem prover too weak. 153359 trivial. 0 not checked. [2018-04-13 00:08:46,489 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:46,489 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:46,489 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=193, Invalid=407, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:46,490 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:46,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:46,861 INFO L93 Difference]: Finished difference Result 989 states and 2089 transitions. [2018-04-13 00:08:46,861 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:08:46,861 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1705 [2018-04-13 00:08:46,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:46,867 INFO L225 Difference]: With dead ends: 989 [2018-04-13 00:08:46,868 INFO L226 Difference]: Without dead ends: 989 [2018-04-13 00:08:46,868 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 232 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=533, Invalid=1189, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:08:46,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 989 states. [2018-04-13 00:08:46,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 989 to 468. [2018-04-13 00:08:46,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:46,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:46,884 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1705 [2018-04-13 00:08:46,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:46,884 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:46,884 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:46,884 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:46,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1712 [2018-04-13 00:08:46,896 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:46,897 INFO L355 BasicCegarLoop]: trace histogram [258, 234, 234, 234, 234, 234, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:46,897 INFO L408 AbstractCegarLoop]: === Iteration 123 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:46,897 INFO L82 PathProgramCache]: Analyzing trace with hash 609295101, now seen corresponding path program 112 times [2018-04-13 00:08:46,897 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:46,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:46,975 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:48,069 INFO L134 CoverageAnalysis]: Checked inductivity of 178158 backedges. 19885 proven. 4790 refuted. 0 times theorem prover too weak. 153483 trivial. 0 not checked. [2018-04-13 00:08:48,070 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:48,070 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:48,070 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:48,071 INFO L134 CoverageAnalysis]: Checked inductivity of 11391 backedges. 1115 proven. 208 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:48,071 INFO L182 omatonBuilderFactory]: Interpolants [109441#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 109440#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 109443#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 109442#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 109445#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 109444#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 109447#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 109446#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 109449#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 109448#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 109451#(<= main_~i~1 18), 109450#(<= main_~i~1 17), 109453#(<= main_~i~1 20), 109452#(<= main_~i~1 19), 109429#true, 109431#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 109430#false, 109433#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 109432#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 109435#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 109434#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 109437#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 109436#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 109439#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 109438#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7))] [2018-04-13 00:08:48,074 INFO L134 CoverageAnalysis]: Checked inductivity of 178158 backedges. 19885 proven. 4790 refuted. 0 times theorem prover too weak. 153483 trivial. 0 not checked. [2018-04-13 00:08:48,074 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:48,074 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:48,075 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=394, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:48,075 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:48,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:48,411 INFO L93 Difference]: Finished difference Result 890 states and 1821 transitions. [2018-04-13 00:08:48,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2018-04-13 00:08:48,411 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1711 [2018-04-13 00:08:48,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:48,415 INFO L225 Difference]: With dead ends: 890 [2018-04-13 00:08:48,415 INFO L226 Difference]: Without dead ends: 890 [2018-04-13 00:08:48,416 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 238 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=584, Invalid=1222, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:08:48,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 890 states. [2018-04-13 00:08:48,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 890 to 468. [2018-04-13 00:08:48,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:48,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:48,426 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1711 [2018-04-13 00:08:48,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:48,427 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:48,427 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:48,427 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:48,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1718 [2018-04-13 00:08:48,438 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:48,438 INFO L355 BasicCegarLoop]: trace histogram [259, 235, 235, 235, 235, 235, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:48,438 INFO L408 AbstractCegarLoop]: === Iteration 124 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:48,439 INFO L82 PathProgramCache]: Analyzing trace with hash 782557829, now seen corresponding path program 113 times [2018-04-13 00:08:48,439 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:48,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:48,505 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:49,521 INFO L134 CoverageAnalysis]: Checked inductivity of 179610 backedges. 22908 proven. 3089 refuted. 0 times theorem prover too weak. 153613 trivial. 0 not checked. [2018-04-13 00:08:49,521 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:49,521 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:49,521 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:49,522 INFO L134 CoverageAnalysis]: Checked inductivity of 11403 backedges. 1225 proven. 110 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:49,522 INFO L182 omatonBuilderFactory]: Interpolants [110849#false, 110848#true, 110851#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 110850#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 110853#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 110852#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 110855#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 110854#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 110857#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 110856#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 110859#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 110858#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 110861#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 110860#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 110863#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 110862#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 110865#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 110864#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 110867#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 110866#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 110869#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 110868#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 110871#(<= main_~i~1 19), 110870#(<= main_~i~1 18), 110872#(<= main_~i~1 20)] [2018-04-13 00:08:49,525 INFO L134 CoverageAnalysis]: Checked inductivity of 179610 backedges. 22908 proven. 3089 refuted. 0 times theorem prover too weak. 153613 trivial. 0 not checked. [2018-04-13 00:08:49,525 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:49,526 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:49,526 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=221, Invalid=379, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:49,526 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:49,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:49,857 INFO L93 Difference]: Finished difference Result 783 states and 1520 transitions. [2018-04-13 00:08:49,857 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2018-04-13 00:08:49,857 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1717 [2018-04-13 00:08:49,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:49,862 INFO L225 Difference]: With dead ends: 783 [2018-04-13 00:08:49,862 INFO L226 Difference]: Without dead ends: 783 [2018-04-13 00:08:49,863 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 243 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=639, Invalid=1253, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:08:49,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 783 states. [2018-04-13 00:08:49,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 783 to 468. [2018-04-13 00:08:49,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 468 states. [2018-04-13 00:08:49,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 707 transitions. [2018-04-13 00:08:49,876 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 707 transitions. Word has length 1717 [2018-04-13 00:08:49,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:49,877 INFO L459 AbstractCegarLoop]: Abstraction has 468 states and 707 transitions. [2018-04-13 00:08:49,877 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:49,877 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 707 transitions. [2018-04-13 00:08:49,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1724 [2018-04-13 00:08:49,888 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:49,889 INFO L355 BasicCegarLoop]: trace histogram [260, 236, 236, 236, 236, 236, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:49,889 INFO L408 AbstractCegarLoop]: === Iteration 125 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:49,889 INFO L82 PathProgramCache]: Analyzing trace with hash -1337717939, now seen corresponding path program 114 times [2018-04-13 00:08:49,889 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:49,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:49,953 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:51,014 INFO L134 CoverageAnalysis]: Checked inductivity of 181068 backedges. 26255 proven. 1064 refuted. 0 times theorem prover too weak. 153749 trivial. 0 not checked. [2018-04-13 00:08:51,014 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:51,014 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:51,014 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:51,015 INFO L134 CoverageAnalysis]: Checked inductivity of 11409 backedges. 1341 proven. 0 refuted. 0 times theorem prover too weak. 10068 trivial. 0 not checked. [2018-04-13 00:08:51,015 INFO L182 omatonBuilderFactory]: Interpolants [112163#false, 112162#true, 112165#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 112164#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 112167#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 112166#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 112169#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 112168#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 112171#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 112170#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 112173#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 112172#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 112175#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 112174#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 112177#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 112176#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 112179#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 112178#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 112181#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 112180#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 112183#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 112182#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 112185#(<= main_~i~1 19), 112184#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 112186#(<= main_~i~1 20)] [2018-04-13 00:08:51,018 INFO L134 CoverageAnalysis]: Checked inductivity of 181068 backedges. 26255 proven. 1064 refuted. 0 times theorem prover too weak. 153749 trivial. 0 not checked. [2018-04-13 00:08:51,018 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:51,019 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:51,019 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=362, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:51,019 INFO L87 Difference]: Start difference. First operand 468 states and 707 transitions. Second operand 25 states. [2018-04-13 00:08:51,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:51,362 INFO L93 Difference]: Finished difference Result 669 states and 1229 transitions. [2018-04-13 00:08:51,362 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:08:51,362 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1723 [2018-04-13 00:08:51,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:51,366 INFO L225 Difference]: With dead ends: 669 [2018-04-13 00:08:51,366 INFO L226 Difference]: Without dead ends: 669 [2018-04-13 00:08:51,366 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 247 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=698, Invalid=1282, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:08:51,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 669 states. [2018-04-13 00:08:51,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 669 to 477. [2018-04-13 00:08:51,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 477 states. [2018-04-13 00:08:51,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 477 states to 477 states and 738 transitions. [2018-04-13 00:08:51,377 INFO L78 Accepts]: Start accepts. Automaton has 477 states and 738 transitions. Word has length 1723 [2018-04-13 00:08:51,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:51,378 INFO L459 AbstractCegarLoop]: Abstraction has 477 states and 738 transitions. [2018-04-13 00:08:51,378 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:51,378 INFO L276 IsEmpty]: Start isEmpty. Operand 477 states and 738 transitions. [2018-04-13 00:08:51,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1730 [2018-04-13 00:08:51,390 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:51,390 INFO L355 BasicCegarLoop]: trace histogram [261, 237, 237, 237, 237, 237, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:51,390 INFO L408 AbstractCegarLoop]: === Iteration 126 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:51,391 INFO L82 PathProgramCache]: Analyzing trace with hash 1370056021, now seen corresponding path program 115 times [2018-04-13 00:08:51,391 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:51,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:51,464 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:52,545 INFO L134 CoverageAnalysis]: Checked inductivity of 182532 backedges. 4945 proven. 11254 refuted. 0 times theorem prover too weak. 166333 trivial. 0 not checked. [2018-04-13 00:08:52,546 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:52,546 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:08:52,546 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:52,547 INFO L134 CoverageAnalysis]: Checked inductivity of 11406 backedges. 345 proven. 756 refuted. 0 times theorem prover too weak. 10305 trivial. 0 not checked. [2018-04-13 00:08:52,547 INFO L182 omatonBuilderFactory]: Interpolants [113373#true, 113375#(<= 0 main_~i~1), 113374#false, 113377#(<= 2 main_~i~1), 113376#(<= 1 main_~i~1), 113379#(<= 4 main_~i~1), 113378#(<= 3 main_~i~1), 113381#(<= 6 main_~i~1), 113380#(<= 5 main_~i~1), 113383#(<= 8 main_~i~1), 113382#(<= 7 main_~i~1), 113385#(<= 10 main_~i~1), 113384#(<= 9 main_~i~1), 113387#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 113386#(<= 11 main_~i~1), 113389#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 113388#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 113391#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 113390#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 113393#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 113392#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 113395#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 113394#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 113397#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 113396#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 113398#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 10)] [2018-04-13 00:08:52,550 INFO L134 CoverageAnalysis]: Checked inductivity of 182532 backedges. 4945 proven. 11254 refuted. 0 times theorem prover too weak. 166333 trivial. 0 not checked. [2018-04-13 00:08:52,550 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:08:52,550 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:08:52,550 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=480, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:08:52,551 INFO L87 Difference]: Start difference. First operand 477 states and 738 transitions. Second operand 26 states. [2018-04-13 00:08:53,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:53,036 INFO L93 Difference]: Finished difference Result 535 states and 793 transitions. [2018-04-13 00:08:53,036 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2018-04-13 00:08:53,036 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1729 [2018-04-13 00:08:53,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:53,038 INFO L225 Difference]: With dead ends: 535 [2018-04-13 00:08:53,038 INFO L226 Difference]: Without dead ends: 535 [2018-04-13 00:08:53,038 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 318 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=324, Invalid=1008, Unknown=0, NotChecked=0, Total=1332 [2018-04-13 00:08:53,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-04-13 00:08:53,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 480. [2018-04-13 00:08:53,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 480 states. [2018-04-13 00:08:53,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 749 transitions. [2018-04-13 00:08:53,044 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 749 transitions. Word has length 1729 [2018-04-13 00:08:53,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:53,044 INFO L459 AbstractCegarLoop]: Abstraction has 480 states and 749 transitions. [2018-04-13 00:08:53,044 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:08:53,044 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 749 transitions. [2018-04-13 00:08:53,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1760 [2018-04-13 00:08:53,056 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:53,056 INFO L355 BasicCegarLoop]: trace histogram [266, 242, 242, 242, 242, 242, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:53,057 INFO L408 AbstractCegarLoop]: === Iteration 127 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:53,057 INFO L82 PathProgramCache]: Analyzing trace with hash 1013727997, now seen corresponding path program 116 times [2018-04-13 00:08:53,057 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:53,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:53,186 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:54,393 INFO L134 CoverageAnalysis]: Checked inductivity of 189942 backedges. 0 proven. 1704 refuted. 0 times theorem prover too weak. 188238 trivial. 0 not checked. [2018-04-13 00:08:54,393 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:54,393 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:08:54,393 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:54,394 INFO L134 CoverageAnalysis]: Checked inductivity of 11691 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 11691 trivial. 0 not checked. [2018-04-13 00:08:54,394 INFO L182 omatonBuilderFactory]: Interpolants [114437#false, 114436#true, 114439#(<= main_~i~1 1), 114438#(= main_~i~1 0), 114441#(<= main_~i~1 3), 114440#(<= main_~i~1 2), 114443#(<= main_~i~1 5), 114442#(<= main_~i~1 4), 114445#(<= main_~i~1 7), 114444#(<= main_~i~1 6), 114447#(<= main_~i~1 9), 114446#(<= main_~i~1 8), 114449#(<= main_~i~1 11), 114448#(<= main_~i~1 10), 114451#(<= main_~i~1 13), 114450#(<= main_~i~1 12), 114453#(<= main_~i~1 15), 114452#(<= main_~i~1 14), 114455#(<= main_~i~1 17), 114454#(<= main_~i~1 16), 114457#(<= main_~i~1 19), 114456#(<= main_~i~1 18), 114459#(<= main_~i~1 21), 114458#(<= main_~i~1 20), 114461#(<= main_~i~1 23), 114460#(<= main_~i~1 22), 114462#(<= main_~i~1 24)] [2018-04-13 00:08:54,397 INFO L134 CoverageAnalysis]: Checked inductivity of 189942 backedges. 0 proven. 1704 refuted. 0 times theorem prover too weak. 188238 trivial. 0 not checked. [2018-04-13 00:08:54,397 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:08:54,397 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:08:54,398 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=351, Invalid=351, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:08:54,398 INFO L87 Difference]: Start difference. First operand 480 states and 749 transitions. Second operand 27 states. [2018-04-13 00:08:54,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:54,620 INFO L93 Difference]: Finished difference Result 899 states and 1541 transitions. [2018-04-13 00:08:54,620 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2018-04-13 00:08:54,620 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 1759 [2018-04-13 00:08:54,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:54,625 INFO L225 Difference]: With dead ends: 899 [2018-04-13 00:08:54,625 INFO L226 Difference]: Without dead ends: 899 [2018-04-13 00:08:54,625 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=351, Invalid=351, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:08:54,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 899 states. [2018-04-13 00:08:54,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 899 to 491. [2018-04-13 00:08:54,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:08:54,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:08:54,637 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1759 [2018-04-13 00:08:54,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:54,637 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:08:54,637 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:08:54,637 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:08:54,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1838 [2018-04-13 00:08:54,651 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:54,651 INFO L355 BasicCegarLoop]: trace histogram [278, 253, 253, 253, 253, 253, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:54,651 INFO L408 AbstractCegarLoop]: === Iteration 128 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:54,652 INFO L82 PathProgramCache]: Analyzing trace with hash -32700970, now seen corresponding path program 117 times [2018-04-13 00:08:54,652 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:54,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:54,737 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:55,911 INFO L134 CoverageAnalysis]: Checked inductivity of 207568 backedges. 8778 proven. 9744 refuted. 0 times theorem prover too weak. 189046 trivial. 0 not checked. [2018-04-13 00:08:55,912 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:55,912 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-13 00:08:55,912 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:55,913 INFO L134 CoverageAnalysis]: Checked inductivity of 12954 backedges. 697 proven. 544 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:08:55,913 INFO L182 omatonBuilderFactory]: Interpolants [115853#true, 115855#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 115854#false, 115857#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 115856#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 115859#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 115858#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 115861#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 115860#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 115863#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 115862#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 115865#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 115864#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 115867#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 115866#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 115869#(<= main_~i~1 12), 115868#(<= main_~i~1 11), 115871#(<= main_~i~1 14), 115870#(<= main_~i~1 13), 115873#(<= main_~i~1 16), 115872#(<= main_~i~1 15), 115875#(<= main_~i~1 18), 115874#(<= main_~i~1 17), 115877#(<= main_~i~1 20), 115876#(<= main_~i~1 19)] [2018-04-13 00:08:55,916 INFO L134 CoverageAnalysis]: Checked inductivity of 207568 backedges. 8778 proven. 9744 refuted. 0 times theorem prover too weak. 189046 trivial. 0 not checked. [2018-04-13 00:08:55,917 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-13 00:08:55,917 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-13 00:08:55,917 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=158, Invalid=442, Unknown=0, NotChecked=0, Total=600 [2018-04-13 00:08:55,917 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 25 states. [2018-04-13 00:08:56,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:56,248 INFO L93 Difference]: Finished difference Result 1380 states and 3131 transitions. [2018-04-13 00:08:56,248 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2018-04-13 00:08:56,248 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 1837 [2018-04-13 00:08:56,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:56,256 INFO L225 Difference]: With dead ends: 1380 [2018-04-13 00:08:56,256 INFO L226 Difference]: Without dead ends: 1380 [2018-04-13 00:08:56,257 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=338, Invalid=994, Unknown=0, NotChecked=0, Total=1332 [2018-04-13 00:08:56,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1380 states. [2018-04-13 00:08:56,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1380 to 494. [2018-04-13 00:08:56,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 494 states. [2018-04-13 00:08:56,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 795 transitions. [2018-04-13 00:08:56,280 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 795 transitions. Word has length 1837 [2018-04-13 00:08:56,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:56,280 INFO L459 AbstractCegarLoop]: Abstraction has 494 states and 795 transitions. [2018-04-13 00:08:56,280 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-13 00:08:56,280 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 795 transitions. [2018-04-13 00:08:56,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1844 [2018-04-13 00:08:56,293 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:56,293 INFO L355 BasicCegarLoop]: trace histogram [279, 254, 254, 254, 254, 254, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:56,294 INFO L408 AbstractCegarLoop]: === Iteration 129 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:56,294 INFO L82 PathProgramCache]: Analyzing trace with hash 1722391326, now seen corresponding path program 118 times [2018-04-13 00:08:56,294 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:56,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:56,370 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:57,476 INFO L134 CoverageAnalysis]: Checked inductivity of 209136 backedges. 9470 proven. 10620 refuted. 0 times theorem prover too weak. 189046 trivial. 0 not checked. [2018-04-13 00:08:57,477 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:57,477 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:08:57,477 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:57,478 INFO L134 CoverageAnalysis]: Checked inductivity of 12987 backedges. 682 proven. 592 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:08:57,478 INFO L182 omatonBuilderFactory]: Interpolants [117777#false, 117776#true, 117779#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 117778#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 117781#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 117780#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 117783#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 117782#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 117785#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 117784#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 117787#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 117786#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 117789#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 117788#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 117791#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 117790#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 117793#(<= main_~i~1 13), 117792#(<= main_~i~1 12), 117795#(<= main_~i~1 15), 117794#(<= main_~i~1 14), 117797#(<= main_~i~1 17), 117796#(<= main_~i~1 16), 117799#(<= main_~i~1 19), 117798#(<= main_~i~1 18), 117801#(<= main_~i~1 21), 117800#(<= main_~i~1 20)] [2018-04-13 00:08:57,482 INFO L134 CoverageAnalysis]: Checked inductivity of 209136 backedges. 9470 proven. 10620 refuted. 0 times theorem prover too weak. 189046 trivial. 0 not checked. [2018-04-13 00:08:57,482 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:08:57,482 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:08:57,482 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=172, Invalid=478, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:08:57,482 INFO L87 Difference]: Start difference. First operand 494 states and 795 transitions. Second operand 26 states. [2018-04-13 00:08:57,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:57,797 INFO L93 Difference]: Finished difference Result 1380 states and 3131 transitions. [2018-04-13 00:08:57,797 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2018-04-13 00:08:57,797 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1843 [2018-04-13 00:08:57,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:57,805 INFO L225 Difference]: With dead ends: 1380 [2018-04-13 00:08:57,805 INFO L226 Difference]: Without dead ends: 1380 [2018-04-13 00:08:57,805 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 210 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=380, Invalid=1102, Unknown=0, NotChecked=0, Total=1482 [2018-04-13 00:08:57,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1380 states. [2018-04-13 00:08:57,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1380 to 491. [2018-04-13 00:08:57,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:08:57,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:08:57,826 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1843 [2018-04-13 00:08:57,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:57,827 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:08:57,827 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:08:57,827 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:08:57,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1850 [2018-04-13 00:08:57,840 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:57,840 INFO L355 BasicCegarLoop]: trace histogram [280, 255, 255, 255, 255, 255, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:57,840 INFO L408 AbstractCegarLoop]: === Iteration 130 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:57,840 INFO L82 PathProgramCache]: Analyzing trace with hash -880600474, now seen corresponding path program 119 times [2018-04-13 00:08:57,841 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:57,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:57,912 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:08:59,055 INFO L134 CoverageAnalysis]: Checked inductivity of 210710 backedges. 11179 proven. 10385 refuted. 0 times theorem prover too weak. 189146 trivial. 0 not checked. [2018-04-13 00:08:59,055 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:08:59,055 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:08:59,056 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:08:59,056 INFO L134 CoverageAnalysis]: Checked inductivity of 13038 backedges. 765 proven. 560 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:08:59,056 INFO L182 omatonBuilderFactory]: Interpolants [119699#true, 119701#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 119700#false, 119703#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 119702#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 119705#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 119704#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 119707#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 119706#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 119709#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 119708#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 119711#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 119710#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 119713#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 119712#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 119715#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 119714#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 119717#(<= main_~i~1 14), 119716#(<= main_~i~1 13), 119719#(<= main_~i~1 16), 119718#(<= main_~i~1 15), 119721#(<= main_~i~1 18), 119720#(<= main_~i~1 17), 119723#(<= main_~i~1 20), 119722#(<= main_~i~1 19), 119724#(<= main_~i~1 21)] [2018-04-13 00:08:59,060 INFO L134 CoverageAnalysis]: Checked inductivity of 210710 backedges. 11179 proven. 10385 refuted. 0 times theorem prover too weak. 189146 trivial. 0 not checked. [2018-04-13 00:08:59,060 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:08:59,060 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:08:59,060 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=474, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:08:59,061 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:08:59,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:08:59,382 INFO L93 Difference]: Finished difference Result 1335 states and 3017 transitions. [2018-04-13 00:08:59,382 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2018-04-13 00:08:59,382 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1849 [2018-04-13 00:08:59,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:08:59,389 INFO L225 Difference]: With dead ends: 1335 [2018-04-13 00:08:59,389 INFO L226 Difference]: Without dead ends: 1335 [2018-04-13 00:08:59,390 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 221 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=414, Invalid=1146, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:08:59,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1335 states. [2018-04-13 00:08:59,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1335 to 491. [2018-04-13 00:08:59,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:08:59,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:08:59,410 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1849 [2018-04-13 00:08:59,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:08:59,411 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:08:59,411 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:08:59,411 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:08:59,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1856 [2018-04-13 00:08:59,424 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:08:59,424 INFO L355 BasicCegarLoop]: trace histogram [281, 256, 256, 256, 256, 256, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:08:59,424 INFO L408 AbstractCegarLoop]: === Iteration 131 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:08:59,424 INFO L82 PathProgramCache]: Analyzing trace with hash -1161930002, now seen corresponding path program 120 times [2018-04-13 00:08:59,425 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:08:59,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:08:59,502 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:00,712 INFO L134 CoverageAnalysis]: Checked inductivity of 212290 backedges. 13122 proven. 9916 refuted. 0 times theorem prover too weak. 189252 trivial. 0 not checked. [2018-04-13 00:09:00,712 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:00,712 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:00,712 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:00,713 INFO L134 CoverageAnalysis]: Checked inductivity of 13080 backedges. 851 proven. 516 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:00,713 INFO L182 omatonBuilderFactory]: Interpolants [121601#(<= main_~i~1 18), 121600#(<= main_~i~1 17), 121603#(<= main_~i~1 20), 121602#(<= main_~i~1 19), 121604#(<= main_~i~1 21), 121579#true, 121581#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 121580#false, 121583#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 121582#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 121585#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 121584#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 121587#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 121586#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 121589#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 121588#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 121591#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 121590#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 121593#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 121592#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 121595#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 121594#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 121597#(<= main_~i~1 14), 121596#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 121599#(<= main_~i~1 16), 121598#(<= main_~i~1 15)] [2018-04-13 00:09:00,717 INFO L134 CoverageAnalysis]: Checked inductivity of 212290 backedges. 13122 proven. 9916 refuted. 0 times theorem prover too weak. 189252 trivial. 0 not checked. [2018-04-13 00:09:00,718 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:00,718 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:00,718 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=468, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:00,718 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:01,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:01,116 INFO L93 Difference]: Finished difference Result 1278 states and 2870 transitions. [2018-04-13 00:09:01,116 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-04-13 00:09:01,116 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1855 [2018-04-13 00:09:01,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:01,124 INFO L225 Difference]: With dead ends: 1278 [2018-04-13 00:09:01,124 INFO L226 Difference]: Without dead ends: 1278 [2018-04-13 00:09:01,124 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 231 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=452, Invalid=1188, Unknown=0, NotChecked=0, Total=1640 [2018-04-13 00:09:01,124 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1278 states. [2018-04-13 00:09:01,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1278 to 491. [2018-04-13 00:09:01,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:09:01,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:09:01,144 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1855 [2018-04-13 00:09:01,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:01,144 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:09:01,144 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:01,145 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:09:01,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1862 [2018-04-13 00:09:01,158 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:01,159 INFO L355 BasicCegarLoop]: trace histogram [282, 257, 257, 257, 257, 257, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:01,159 INFO L408 AbstractCegarLoop]: === Iteration 132 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:01,159 INFO L82 PathProgramCache]: Analyzing trace with hash -254935882, now seen corresponding path program 121 times [2018-04-13 00:09:01,159 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:01,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:01,241 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:02,699 INFO L134 CoverageAnalysis]: Checked inductivity of 213876 backedges. 15317 proven. 9195 refuted. 0 times theorem prover too weak. 189364 trivial. 0 not checked. [2018-04-13 00:09:02,700 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:02,700 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:02,700 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:02,701 INFO L134 CoverageAnalysis]: Checked inductivity of 13116 backedges. 943 proven. 460 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:02,701 INFO L182 omatonBuilderFactory]: Interpolants [123405#false, 123404#true, 123407#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 123406#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 123409#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 123408#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 123411#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 123410#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 123413#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 123412#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 123415#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 123414#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 123417#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 123416#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 123419#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 123418#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 123421#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 123420#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 123423#(<= main_~i~1 15), 123422#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 123425#(<= main_~i~1 17), 123424#(<= main_~i~1 16), 123427#(<= main_~i~1 19), 123426#(<= main_~i~1 18), 123429#(<= main_~i~1 21), 123428#(<= main_~i~1 20)] [2018-04-13 00:09:02,705 INFO L134 CoverageAnalysis]: Checked inductivity of 213876 backedges. 15317 proven. 9195 refuted. 0 times theorem prover too weak. 189364 trivial. 0 not checked. [2018-04-13 00:09:02,705 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:02,705 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:02,705 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=460, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:02,705 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:03,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:03,123 INFO L93 Difference]: Finished difference Result 1209 states and 2689 transitions. [2018-04-13 00:09:03,123 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:09:03,123 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1861 [2018-04-13 00:09:03,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:03,130 INFO L225 Difference]: With dead ends: 1209 [2018-04-13 00:09:03,130 INFO L226 Difference]: Without dead ends: 1209 [2018-04-13 00:09:03,130 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 240 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=494, Invalid=1228, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:09:03,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1209 states. [2018-04-13 00:09:03,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1209 to 491. [2018-04-13 00:09:03,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:09:03,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:09:03,149 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1861 [2018-04-13 00:09:03,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:03,149 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:09:03,149 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:03,150 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:09:03,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1868 [2018-04-13 00:09:03,163 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:03,163 INFO L355 BasicCegarLoop]: trace histogram [283, 258, 258, 258, 258, 258, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:03,163 INFO L408 AbstractCegarLoop]: === Iteration 133 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:03,164 INFO L82 PathProgramCache]: Analyzing trace with hash 989532094, now seen corresponding path program 122 times [2018-04-13 00:09:03,164 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:03,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:03,243 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:04,450 INFO L134 CoverageAnalysis]: Checked inductivity of 215468 backedges. 17782 proven. 8204 refuted. 0 times theorem prover too weak. 189482 trivial. 0 not checked. [2018-04-13 00:09:04,451 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:04,451 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:04,451 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:04,452 INFO L134 CoverageAnalysis]: Checked inductivity of 13146 backedges. 1041 proven. 392 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:04,452 INFO L182 omatonBuilderFactory]: Interpolants [125185#(<= main_~i~1 19), 125184#(<= main_~i~1 18), 125187#(<= main_~i~1 21), 125186#(<= main_~i~1 20), 125163#false, 125162#true, 125165#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 125164#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 125167#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 125166#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 125169#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 125168#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 125171#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 125170#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 125173#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 125172#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 125175#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 125174#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 125177#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 125176#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 125179#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 125178#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 125181#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 125180#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 125183#(<= main_~i~1 17), 125182#(<= main_~i~1 16)] [2018-04-13 00:09:04,456 INFO L134 CoverageAnalysis]: Checked inductivity of 215468 backedges. 17782 proven. 8204 refuted. 0 times theorem prover too weak. 189482 trivial. 0 not checked. [2018-04-13 00:09:04,456 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:04,456 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:04,456 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=450, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:04,456 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:04,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:04,826 INFO L93 Difference]: Finished difference Result 1128 states and 2473 transitions. [2018-04-13 00:09:04,826 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2018-04-13 00:09:04,826 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1867 [2018-04-13 00:09:04,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:04,832 INFO L225 Difference]: With dead ends: 1128 [2018-04-13 00:09:04,832 INFO L226 Difference]: Without dead ends: 1128 [2018-04-13 00:09:04,832 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 248 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=540, Invalid=1266, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:09:04,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1128 states. [2018-04-13 00:09:04,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1128 to 491. [2018-04-13 00:09:04,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:09:04,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:09:04,848 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1867 [2018-04-13 00:09:04,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:04,849 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:09:04,849 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:04,849 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:09:04,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1874 [2018-04-13 00:09:04,862 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:04,862 INFO L355 BasicCegarLoop]: trace histogram [284, 259, 259, 259, 259, 259, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:04,862 INFO L408 AbstractCegarLoop]: === Iteration 134 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:04,862 INFO L82 PathProgramCache]: Analyzing trace with hash -1131342842, now seen corresponding path program 123 times [2018-04-13 00:09:04,863 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:04,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:04,937 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:06,079 INFO L134 CoverageAnalysis]: Checked inductivity of 217066 backedges. 20535 proven. 6925 refuted. 0 times theorem prover too weak. 189606 trivial. 0 not checked. [2018-04-13 00:09:06,080 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:06,080 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:06,080 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:06,080 INFO L134 CoverageAnalysis]: Checked inductivity of 13170 backedges. 1145 proven. 312 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:06,081 INFO L182 omatonBuilderFactory]: Interpolants [126849#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 126848#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 126851#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 126850#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 126853#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 126852#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 126855#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 126854#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 126857#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 126856#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 126859#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 126858#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 126861#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 126860#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 126863#(<= main_~i~1 18), 126862#(<= main_~i~1 17), 126865#(<= main_~i~1 20), 126864#(<= main_~i~1 19), 126866#(<= main_~i~1 21), 126841#true, 126843#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 126842#false, 126845#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 126844#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 126847#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 126846#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3))] [2018-04-13 00:09:06,084 INFO L134 CoverageAnalysis]: Checked inductivity of 217066 backedges. 20535 proven. 6925 refuted. 0 times theorem prover too weak. 189606 trivial. 0 not checked. [2018-04-13 00:09:06,084 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:06,084 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:06,085 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=212, Invalid=438, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:06,085 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:06,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:06,438 INFO L93 Difference]: Finished difference Result 1035 states and 2221 transitions. [2018-04-13 00:09:06,439 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2018-04-13 00:09:06,439 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1873 [2018-04-13 00:09:06,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:06,445 INFO L225 Difference]: With dead ends: 1035 [2018-04-13 00:09:06,445 INFO L226 Difference]: Without dead ends: 1035 [2018-04-13 00:09:06,446 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 255 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=590, Invalid=1302, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:09:06,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1035 states. [2018-04-13 00:09:06,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1035 to 491. [2018-04-13 00:09:06,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:09:06,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:09:06,462 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1873 [2018-04-13 00:09:06,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:06,463 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:09:06,463 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:06,463 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:09:06,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1880 [2018-04-13 00:09:06,477 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:06,477 INFO L355 BasicCegarLoop]: trace histogram [285, 260, 260, 260, 260, 260, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:06,477 INFO L408 AbstractCegarLoop]: === Iteration 135 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:06,477 INFO L82 PathProgramCache]: Analyzing trace with hash 147192206, now seen corresponding path program 124 times [2018-04-13 00:09:06,477 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:06,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:06,560 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:07,827 INFO L134 CoverageAnalysis]: Checked inductivity of 218670 backedges. 23594 proven. 5340 refuted. 0 times theorem prover too weak. 189736 trivial. 0 not checked. [2018-04-13 00:09:07,827 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:07,827 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:07,827 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:07,828 INFO L134 CoverageAnalysis]: Checked inductivity of 13188 backedges. 1255 proven. 220 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:07,828 INFO L182 omatonBuilderFactory]: Interpolants [128449#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 128448#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 128451#(<= main_~i~1 18), 128450#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 128453#(<= main_~i~1 20), 128452#(<= main_~i~1 19), 128454#(<= main_~i~1 21), 128429#true, 128431#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 128430#false, 128433#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 128432#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 128435#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 128434#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 128437#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 128436#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 128439#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 128438#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 128441#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 128440#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 128443#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 128442#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 128445#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 128444#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 128447#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 128446#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15))] [2018-04-13 00:09:07,832 INFO L134 CoverageAnalysis]: Checked inductivity of 218670 backedges. 23594 proven. 5340 refuted. 0 times theorem prover too weak. 189736 trivial. 0 not checked. [2018-04-13 00:09:07,832 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:07,832 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:07,832 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=424, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:07,833 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:08,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:08,174 INFO L93 Difference]: Finished difference Result 930 states and 1932 transitions. [2018-04-13 00:09:08,174 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:09:08,175 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1879 [2018-04-13 00:09:08,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:08,181 INFO L225 Difference]: With dead ends: 930 [2018-04-13 00:09:08,181 INFO L226 Difference]: Without dead ends: 930 [2018-04-13 00:09:08,181 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=644, Invalid=1336, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:09:08,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 930 states. [2018-04-13 00:09:08,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 930 to 491. [2018-04-13 00:09:08,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:09:08,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:09:08,196 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1879 [2018-04-13 00:09:08,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:08,196 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:09:08,196 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:08,197 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:09:08,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1886 [2018-04-13 00:09:08,211 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:08,211 INFO L355 BasicCegarLoop]: trace histogram [286, 261, 261, 261, 261, 261, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:08,211 INFO L408 AbstractCegarLoop]: === Iteration 136 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:08,211 INFO L82 PathProgramCache]: Analyzing trace with hash 358490198, now seen corresponding path program 125 times [2018-04-13 00:09:08,212 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:08,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:08,300 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:09,588 INFO L134 CoverageAnalysis]: Checked inductivity of 220280 backedges. 26977 proven. 3431 refuted. 0 times theorem prover too weak. 189872 trivial. 0 not checked. [2018-04-13 00:09:09,588 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:09,589 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:09,589 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:09,589 INFO L134 CoverageAnalysis]: Checked inductivity of 13200 backedges. 1371 proven. 116 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:09,589 INFO L182 omatonBuilderFactory]: Interpolants [129921#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 129920#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 129923#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 129922#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 129925#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 129924#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 129927#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 129926#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 129929#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 129928#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 129931#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 129930#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 129933#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 129932#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 129935#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 129934#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 129937#(<= main_~i~1 19), 129936#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 129939#(<= main_~i~1 21), 129938#(<= main_~i~1 20), 129915#false, 129914#true, 129917#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 129916#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 129919#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 129918#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:09:09,593 INFO L134 CoverageAnalysis]: Checked inductivity of 220280 backedges. 26977 proven. 3431 refuted. 0 times theorem prover too weak. 189872 trivial. 0 not checked. [2018-04-13 00:09:09,594 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:09,594 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:09,594 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=242, Invalid=408, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:09,594 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:09,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:09,976 INFO L93 Difference]: Finished difference Result 817 states and 1609 transitions. [2018-04-13 00:09:09,976 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-04-13 00:09:09,976 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1885 [2018-04-13 00:09:09,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:09,981 INFO L225 Difference]: With dead ends: 817 [2018-04-13 00:09:09,981 INFO L226 Difference]: Without dead ends: 817 [2018-04-13 00:09:09,982 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 266 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=702, Invalid=1368, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:09:09,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 817 states. [2018-04-13 00:09:09,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 817 to 491. [2018-04-13 00:09:09,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2018-04-13 00:09:09,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 770 transitions. [2018-04-13 00:09:09,994 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 770 transitions. Word has length 1885 [2018-04-13 00:09:09,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:09,994 INFO L459 AbstractCegarLoop]: Abstraction has 491 states and 770 transitions. [2018-04-13 00:09:09,994 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:09,994 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 770 transitions. [2018-04-13 00:09:10,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1892 [2018-04-13 00:09:10,009 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:10,009 INFO L355 BasicCegarLoop]: trace histogram [287, 262, 262, 262, 262, 262, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:10,009 INFO L408 AbstractCegarLoop]: === Iteration 137 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:10,009 INFO L82 PathProgramCache]: Analyzing trace with hash -1156818850, now seen corresponding path program 126 times [2018-04-13 00:09:10,010 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:10,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:10,098 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:11,423 INFO L134 CoverageAnalysis]: Checked inductivity of 221896 backedges. 30702 proven. 1180 refuted. 0 times theorem prover too weak. 190014 trivial. 0 not checked. [2018-04-13 00:09:11,423 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:11,450 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:11,450 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:11,451 INFO L134 CoverageAnalysis]: Checked inductivity of 13206 backedges. 1493 proven. 0 refuted. 0 times theorem prover too weak. 11713 trivial. 0 not checked. [2018-04-13 00:09:11,451 INFO L182 omatonBuilderFactory]: Interpolants [131290#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 131291#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 131288#true, 131289#false, 131294#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 131295#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 131292#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 131293#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 131298#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 131299#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 131296#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 131297#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 131302#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 131303#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 131300#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 131301#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 131306#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 131307#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 131304#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 131305#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 131310#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 131311#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 131308#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 131309#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 131312#(<= main_~i~1 20), 131313#(<= main_~i~1 21)] [2018-04-13 00:09:11,455 INFO L134 CoverageAnalysis]: Checked inductivity of 221896 backedges. 30702 proven. 1180 refuted. 0 times theorem prover too weak. 190014 trivial. 0 not checked. [2018-04-13 00:09:11,455 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:11,456 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:11,456 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=260, Invalid=390, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:11,456 INFO L87 Difference]: Start difference. First operand 491 states and 770 transitions. Second operand 26 states. [2018-04-13 00:09:11,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:11,822 INFO L93 Difference]: Finished difference Result 697 states and 1297 transitions. [2018-04-13 00:09:11,822 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:09:11,822 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1891 [2018-04-13 00:09:11,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:11,825 INFO L225 Difference]: With dead ends: 697 [2018-04-13 00:09:11,825 INFO L226 Difference]: Without dead ends: 697 [2018-04-13 00:09:11,826 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 270 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=764, Invalid=1398, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:09:11,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 697 states. [2018-04-13 00:09:11,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 697 to 500. [2018-04-13 00:09:11,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 500 states. [2018-04-13 00:09:11,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 500 states to 500 states and 802 transitions. [2018-04-13 00:09:11,836 INFO L78 Accepts]: Start accepts. Automaton has 500 states and 802 transitions. Word has length 1891 [2018-04-13 00:09:11,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:11,837 INFO L459 AbstractCegarLoop]: Abstraction has 500 states and 802 transitions. [2018-04-13 00:09:11,837 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:11,837 INFO L276 IsEmpty]: Start isEmpty. Operand 500 states and 802 transitions. [2018-04-13 00:09:11,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1898 [2018-04-13 00:09:11,850 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:11,850 INFO L355 BasicCegarLoop]: trace histogram [288, 263, 263, 263, 263, 263, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:11,851 INFO L408 AbstractCegarLoop]: === Iteration 138 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:11,851 INFO L82 PathProgramCache]: Analyzing trace with hash -376577626, now seen corresponding path program 127 times [2018-04-13 00:09:11,851 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:11,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:11,928 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:13,043 INFO L134 CoverageAnalysis]: Checked inductivity of 223518 backedges. 0 proven. 1850 refuted. 0 times theorem prover too weak. 221668 trivial. 0 not checked. [2018-04-13 00:09:13,044 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:13,044 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:13,044 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:13,044 INFO L134 CoverageAnalysis]: Checked inductivity of 13203 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 13203 trivial. 0 not checked. [2018-04-13 00:09:13,045 INFO L182 omatonBuilderFactory]: Interpolants [132554#false, 132555#(= main_~i~1 0), 132553#true, 132558#(<= main_~i~1 3), 132559#(<= main_~i~1 4), 132556#(<= main_~i~1 1), 132557#(<= main_~i~1 2), 132562#(<= main_~i~1 7), 132563#(<= main_~i~1 8), 132560#(<= main_~i~1 5), 132561#(<= main_~i~1 6), 132566#(<= main_~i~1 11), 132567#(<= main_~i~1 12), 132564#(<= main_~i~1 9), 132565#(<= main_~i~1 10), 132570#(<= main_~i~1 15), 132571#(<= main_~i~1 16), 132568#(<= main_~i~1 13), 132569#(<= main_~i~1 14), 132574#(<= main_~i~1 19), 132575#(<= main_~i~1 20), 132572#(<= main_~i~1 17), 132573#(<= main_~i~1 18), 132578#(<= main_~i~1 23), 132579#(<= main_~i~1 24), 132576#(<= main_~i~1 21), 132577#(<= main_~i~1 22), 132580#(<= main_~i~1 25)] [2018-04-13 00:09:13,048 INFO L134 CoverageAnalysis]: Checked inductivity of 223518 backedges. 0 proven. 1850 refuted. 0 times theorem prover too weak. 221668 trivial. 0 not checked. [2018-04-13 00:09:13,048 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:13,048 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:13,048 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=378, Invalid=378, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:13,048 INFO L87 Difference]: Start difference. First operand 500 states and 802 transitions. Second operand 28 states. [2018-04-13 00:09:13,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:13,273 INFO L93 Difference]: Finished difference Result 986 states and 1804 transitions. [2018-04-13 00:09:13,273 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2018-04-13 00:09:13,273 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 1897 [2018-04-13 00:09:13,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:13,278 INFO L225 Difference]: With dead ends: 986 [2018-04-13 00:09:13,278 INFO L226 Difference]: Without dead ends: 986 [2018-04-13 00:09:13,278 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=378, Invalid=378, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:13,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 986 states. [2018-04-13 00:09:13,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 986 to 511. [2018-04-13 00:09:13,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:13,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:13,289 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 1897 [2018-04-13 00:09:13,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:13,290 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:13,290 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:13,290 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:13,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1976 [2018-04-13 00:09:13,305 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:13,306 INFO L355 BasicCegarLoop]: trace histogram [300, 274, 274, 274, 274, 274, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:13,306 INFO L408 AbstractCegarLoop]: === Iteration 139 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:13,306 INFO L82 PathProgramCache]: Analyzing trace with hash 573380927, now seen corresponding path program 128 times [2018-04-13 00:09:13,306 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:13,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:13,387 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:14,655 INFO L134 CoverageAnalysis]: Checked inductivity of 242606 backedges. 8878 proven. 11251 refuted. 0 times theorem prover too weak. 222477 trivial. 0 not checked. [2018-04-13 00:09:14,655 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:14,655 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-13 00:09:14,655 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:14,656 INFO L134 CoverageAnalysis]: Checked inductivity of 14535 backedges. 697 proven. 612 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:14,656 INFO L182 omatonBuilderFactory]: Interpolants [134082#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 134083#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 134080#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 134081#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 134086#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 134087#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 134084#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 134085#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 134090#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 134091#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 134088#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 134089#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 134094#(<= main_~i~1 12), 134095#(<= main_~i~1 13), 134092#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 134093#(<= main_~i~1 11), 134098#(<= main_~i~1 16), 134099#(<= main_~i~1 17), 134096#(<= main_~i~1 14), 134097#(<= main_~i~1 15), 134102#(<= main_~i~1 20), 134103#(<= main_~i~1 21), 134100#(<= main_~i~1 18), 134101#(<= main_~i~1 19), 134078#true, 134079#false] [2018-04-13 00:09:14,660 INFO L134 CoverageAnalysis]: Checked inductivity of 242606 backedges. 8878 proven. 11251 refuted. 0 times theorem prover too weak. 222477 trivial. 0 not checked. [2018-04-13 00:09:14,661 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-13 00:09:14,661 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-13 00:09:14,661 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=480, Unknown=0, NotChecked=0, Total=650 [2018-04-13 00:09:14,661 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 26 states. [2018-04-13 00:09:15,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:15,004 INFO L93 Difference]: Finished difference Result 1495 states and 3579 transitions. [2018-04-13 00:09:15,004 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2018-04-13 00:09:15,004 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 1975 [2018-04-13 00:09:15,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:15,013 INFO L225 Difference]: With dead ends: 1495 [2018-04-13 00:09:15,013 INFO L226 Difference]: Without dead ends: 1495 [2018-04-13 00:09:15,014 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 198 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=350, Invalid=1056, Unknown=0, NotChecked=0, Total=1406 [2018-04-13 00:09:15,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1495 states. [2018-04-13 00:09:15,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1495 to 514. [2018-04-13 00:09:15,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 514 states. [2018-04-13 00:09:15,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 514 states to 514 states and 850 transitions. [2018-04-13 00:09:15,040 INFO L78 Accepts]: Start accepts. Automaton has 514 states and 850 transitions. Word has length 1975 [2018-04-13 00:09:15,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:15,040 INFO L459 AbstractCegarLoop]: Abstraction has 514 states and 850 transitions. [2018-04-13 00:09:15,040 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-13 00:09:15,040 INFO L276 IsEmpty]: Start isEmpty. Operand 514 states and 850 transitions. [2018-04-13 00:09:15,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1982 [2018-04-13 00:09:15,056 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:15,056 INFO L355 BasicCegarLoop]: trace histogram [301, 275, 275, 275, 275, 275, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:15,056 INFO L408 AbstractCegarLoop]: === Iteration 140 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:15,056 INFO L82 PathProgramCache]: Analyzing trace with hash -1658243961, now seen corresponding path program 129 times [2018-04-13 00:09:15,057 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:15,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:15,143 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:16,489 INFO L134 CoverageAnalysis]: Checked inductivity of 244302 backedges. 9570 proven. 12255 refuted. 0 times theorem prover too weak. 222477 trivial. 0 not checked. [2018-04-13 00:09:16,489 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:16,598 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:16,598 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:16,599 INFO L134 CoverageAnalysis]: Checked inductivity of 14574 backedges. 682 proven. 666 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:16,599 INFO L182 omatonBuilderFactory]: Interpolants [136138#false, 136139#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 136137#true, 136142#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 136143#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 136140#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 136141#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 136146#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 136147#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 136144#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 136145#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 136150#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 136151#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 136148#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 136149#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 136154#(<= main_~i~1 13), 136155#(<= main_~i~1 14), 136152#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 136153#(<= main_~i~1 12), 136158#(<= main_~i~1 17), 136159#(<= main_~i~1 18), 136156#(<= main_~i~1 15), 136157#(<= main_~i~1 16), 136162#(<= main_~i~1 21), 136163#(<= main_~i~1 22), 136160#(<= main_~i~1 19), 136161#(<= main_~i~1 20)] [2018-04-13 00:09:16,603 INFO L134 CoverageAnalysis]: Checked inductivity of 244302 backedges. 9570 proven. 12255 refuted. 0 times theorem prover too weak. 222477 trivial. 0 not checked. [2018-04-13 00:09:16,603 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:16,604 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:16,604 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=184, Invalid=518, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:16,604 INFO L87 Difference]: Start difference. First operand 514 states and 850 transitions. Second operand 27 states. [2018-04-13 00:09:16,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:16,995 INFO L93 Difference]: Finished difference Result 1495 states and 3579 transitions. [2018-04-13 00:09:16,995 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2018-04-13 00:09:16,995 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 1981 [2018-04-13 00:09:16,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:17,005 INFO L225 Difference]: With dead ends: 1495 [2018-04-13 00:09:17,005 INFO L226 Difference]: Without dead ends: 1495 [2018-04-13 00:09:17,005 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 222 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=392, Invalid=1168, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:09:17,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1495 states. [2018-04-13 00:09:17,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1495 to 511. [2018-04-13 00:09:17,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:17,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:17,032 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 1981 [2018-04-13 00:09:17,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:17,032 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:17,032 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:17,032 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:17,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1988 [2018-04-13 00:09:17,048 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:17,048 INFO L355 BasicCegarLoop]: trace histogram [302, 276, 276, 276, 276, 276, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:17,048 INFO L408 AbstractCegarLoop]: === Iteration 141 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:17,048 INFO L82 PathProgramCache]: Analyzing trace with hash 338016719, now seen corresponding path program 130 times [2018-04-13 00:09:17,048 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:17,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:17,134 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:18,457 INFO L134 CoverageAnalysis]: Checked inductivity of 246004 backedges. 11285 proven. 12142 refuted. 0 times theorem prover too weak. 222577 trivial. 0 not checked. [2018-04-13 00:09:18,457 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:18,457 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:18,458 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:18,458 INFO L134 CoverageAnalysis]: Checked inductivity of 14631 backedges. 765 proven. 640 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:18,458 INFO L182 omatonBuilderFactory]: Interpolants [138198#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 138199#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 138196#true, 138197#false, 138202#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 138203#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 138200#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 138201#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 138206#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 138207#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 138204#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 138205#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 138210#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 138211#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 138208#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 138209#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 138214#(<= main_~i~1 14), 138215#(<= main_~i~1 15), 138212#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 138213#(<= main_~i~1 13), 138218#(<= main_~i~1 18), 138219#(<= main_~i~1 19), 138216#(<= main_~i~1 16), 138217#(<= main_~i~1 17), 138222#(<= main_~i~1 22), 138220#(<= main_~i~1 20), 138221#(<= main_~i~1 21)] [2018-04-13 00:09:18,462 INFO L134 CoverageAnalysis]: Checked inductivity of 246004 backedges. 11285 proven. 12142 refuted. 0 times theorem prover too weak. 222577 trivial. 0 not checked. [2018-04-13 00:09:18,463 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:18,463 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:18,463 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=515, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:18,463 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:18,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:18,882 INFO L93 Difference]: Finished difference Result 1456 states and 3475 transitions. [2018-04-13 00:09:18,882 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-04-13 00:09:18,882 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 1987 [2018-04-13 00:09:18,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:18,892 INFO L225 Difference]: With dead ends: 1456 [2018-04-13 00:09:18,892 INFO L226 Difference]: Without dead ends: 1456 [2018-04-13 00:09:18,893 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 234 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=425, Invalid=1215, Unknown=0, NotChecked=0, Total=1640 [2018-04-13 00:09:18,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1456 states. [2018-04-13 00:09:18,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1456 to 511. [2018-04-13 00:09:18,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:18,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:18,923 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 1987 [2018-04-13 00:09:18,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:18,924 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:18,924 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:18,924 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:18,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1994 [2018-04-13 00:09:18,940 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:18,940 INFO L355 BasicCegarLoop]: trace histogram [303, 277, 277, 277, 277, 277, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:18,940 INFO L408 AbstractCegarLoop]: === Iteration 142 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:18,940 INFO L82 PathProgramCache]: Analyzing trace with hash 1608478807, now seen corresponding path program 131 times [2018-04-13 00:09:18,941 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:19,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:19,035 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:20,350 INFO L134 CoverageAnalysis]: Checked inductivity of 247712 backedges. 13234 proven. 11795 refuted. 0 times theorem prover too weak. 222683 trivial. 0 not checked. [2018-04-13 00:09:20,350 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:20,351 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:20,351 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:20,351 INFO L134 CoverageAnalysis]: Checked inductivity of 14679 backedges. 851 proven. 602 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:20,352 INFO L182 omatonBuilderFactory]: Interpolants [140226#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 140227#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 140224#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 140225#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 140230#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 140231#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 140228#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 140229#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 140234#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 140235#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 140232#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 140233#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 140238#(<= main_~i~1 16), 140239#(<= main_~i~1 17), 140236#(<= main_~i~1 14), 140237#(<= main_~i~1 15), 140242#(<= main_~i~1 20), 140243#(<= main_~i~1 21), 140240#(<= main_~i~1 18), 140241#(<= main_~i~1 19), 140244#(<= main_~i~1 22), 140218#true, 140219#false, 140222#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 140223#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 140220#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 140221#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:09:20,356 INFO L134 CoverageAnalysis]: Checked inductivity of 247712 backedges. 13234 proven. 11795 refuted. 0 times theorem prover too weak. 222683 trivial. 0 not checked. [2018-04-13 00:09:20,356 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:20,356 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:20,356 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=192, Invalid=510, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:20,356 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:20,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:20,719 INFO L93 Difference]: Finished difference Result 1405 states and 3337 transitions. [2018-04-13 00:09:20,719 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:09:20,719 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 1993 [2018-04-13 00:09:20,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:20,728 INFO L225 Difference]: With dead ends: 1405 [2018-04-13 00:09:20,728 INFO L226 Difference]: Without dead ends: 1405 [2018-04-13 00:09:20,728 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 245 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=462, Invalid=1260, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:09:20,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1405 states. [2018-04-13 00:09:20,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1405 to 511. [2018-04-13 00:09:20,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:20,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:20,750 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 1993 [2018-04-13 00:09:20,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:20,751 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:20,751 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:20,751 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:20,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2000 [2018-04-13 00:09:20,766 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:20,766 INFO L355 BasicCegarLoop]: trace histogram [304, 278, 278, 278, 278, 278, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:20,766 INFO L408 AbstractCegarLoop]: === Iteration 143 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:20,766 INFO L82 PathProgramCache]: Analyzing trace with hash 2080438303, now seen corresponding path program 132 times [2018-04-13 00:09:20,767 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:20,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:20,847 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:22,125 INFO L134 CoverageAnalysis]: Checked inductivity of 249426 backedges. 15435 proven. 11196 refuted. 0 times theorem prover too weak. 222795 trivial. 0 not checked. [2018-04-13 00:09:22,125 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:22,125 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:22,126 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:22,126 INFO L134 CoverageAnalysis]: Checked inductivity of 14721 backedges. 943 proven. 552 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:22,126 INFO L182 omatonBuilderFactory]: Interpolants [142210#(<= main_~i~1 15), 142211#(<= main_~i~1 16), 142208#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 142209#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 142214#(<= main_~i~1 19), 142215#(<= main_~i~1 20), 142212#(<= main_~i~1 17), 142213#(<= main_~i~1 18), 142216#(<= main_~i~1 21), 142217#(<= main_~i~1 22), 142191#true, 142194#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 142195#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 142192#false, 142193#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 142198#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 142199#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 142196#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 142197#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 142202#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 142203#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 142200#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 142201#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 142206#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 142207#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 142204#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 142205#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:09:22,131 INFO L134 CoverageAnalysis]: Checked inductivity of 249426 backedges. 15435 proven. 11196 refuted. 0 times theorem prover too weak. 222795 trivial. 0 not checked. [2018-04-13 00:09:22,131 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:22,131 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:22,131 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=199, Invalid=503, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:22,131 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:22,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:22,510 INFO L93 Difference]: Finished difference Result 1342 states and 3164 transitions. [2018-04-13 00:09:22,510 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2018-04-13 00:09:22,510 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 1999 [2018-04-13 00:09:22,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:22,518 INFO L225 Difference]: With dead ends: 1342 [2018-04-13 00:09:22,518 INFO L226 Difference]: Without dead ends: 1342 [2018-04-13 00:09:22,519 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 255 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=503, Invalid=1303, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:09:22,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1342 states. [2018-04-13 00:09:22,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1342 to 511. [2018-04-13 00:09:22,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:22,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:22,541 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 1999 [2018-04-13 00:09:22,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:22,541 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:22,541 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:22,541 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:22,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2006 [2018-04-13 00:09:22,557 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:22,557 INFO L355 BasicCegarLoop]: trace histogram [305, 279, 279, 279, 279, 279, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:22,557 INFO L408 AbstractCegarLoop]: === Iteration 144 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:22,557 INFO L82 PathProgramCache]: Analyzing trace with hash -658546393, now seen corresponding path program 133 times [2018-04-13 00:09:22,558 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:22,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:22,645 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:24,026 INFO L134 CoverageAnalysis]: Checked inductivity of 251146 backedges. 17906 proven. 10327 refuted. 0 times theorem prover too weak. 222913 trivial. 0 not checked. [2018-04-13 00:09:24,026 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:24,026 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:24,026 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:24,027 INFO L134 CoverageAnalysis]: Checked inductivity of 14757 backedges. 1041 proven. 490 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:24,027 INFO L182 omatonBuilderFactory]: Interpolants [144128#(<= main_~i~1 21), 144129#(<= main_~i~1 22), 144103#true, 144106#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 144107#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 144104#false, 144105#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 144110#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 144111#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 144108#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 144109#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 144114#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 144115#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 144112#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 144113#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 144118#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 144119#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 144116#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 144117#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 144122#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 144123#(<= main_~i~1 16), 144120#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 144121#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 144126#(<= main_~i~1 19), 144127#(<= main_~i~1 20), 144124#(<= main_~i~1 17), 144125#(<= main_~i~1 18)] [2018-04-13 00:09:24,032 INFO L134 CoverageAnalysis]: Checked inductivity of 251146 backedges. 17906 proven. 10327 refuted. 0 times theorem prover too weak. 222913 trivial. 0 not checked. [2018-04-13 00:09:24,032 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:24,032 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:24,032 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=494, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:24,032 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:24,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:24,460 INFO L93 Difference]: Finished difference Result 1267 states and 2955 transitions. [2018-04-13 00:09:24,460 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2018-04-13 00:09:24,460 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 2005 [2018-04-13 00:09:24,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:24,467 INFO L225 Difference]: With dead ends: 1267 [2018-04-13 00:09:24,467 INFO L226 Difference]: Without dead ends: 1267 [2018-04-13 00:09:24,468 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=548, Invalid=1344, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:09:24,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1267 states. [2018-04-13 00:09:24,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1267 to 511. [2018-04-13 00:09:24,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:24,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:24,489 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 2005 [2018-04-13 00:09:24,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:24,490 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:24,490 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:24,490 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:24,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2012 [2018-04-13 00:09:24,506 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:24,506 INFO L355 BasicCegarLoop]: trace histogram [306, 280, 280, 280, 280, 280, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:24,506 INFO L408 AbstractCegarLoop]: === Iteration 145 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:24,506 INFO L82 PathProgramCache]: Analyzing trace with hash 1493576559, now seen corresponding path program 134 times [2018-04-13 00:09:24,507 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:24,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:24,598 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:26,021 INFO L134 CoverageAnalysis]: Checked inductivity of 252872 backedges. 20665 proven. 9170 refuted. 0 times theorem prover too weak. 223037 trivial. 0 not checked. [2018-04-13 00:09:26,022 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:26,022 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:26,022 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:26,023 INFO L134 CoverageAnalysis]: Checked inductivity of 14787 backedges. 1145 proven. 416 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:26,023 INFO L182 omatonBuilderFactory]: Interpolants [145942#true, 145943#false, 145946#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 145947#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 145944#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 145945#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 145950#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 145951#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 145948#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 145949#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 145954#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 145955#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 145952#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 145953#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 145958#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 145959#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 145956#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 145957#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 145962#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 145963#(<= main_~i~1 17), 145960#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 145961#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 145966#(<= main_~i~1 20), 145967#(<= main_~i~1 21), 145964#(<= main_~i~1 18), 145965#(<= main_~i~1 19), 145968#(<= main_~i~1 22)] [2018-04-13 00:09:26,027 INFO L134 CoverageAnalysis]: Checked inductivity of 252872 backedges. 20665 proven. 9170 refuted. 0 times theorem prover too weak. 223037 trivial. 0 not checked. [2018-04-13 00:09:26,027 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:26,028 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:26,028 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=219, Invalid=483, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:26,028 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:26,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:26,434 INFO L93 Difference]: Finished difference Result 1180 states and 2709 transitions. [2018-04-13 00:09:26,434 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:09:26,434 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 2011 [2018-04-13 00:09:26,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:26,442 INFO L225 Difference]: With dead ends: 1180 [2018-04-13 00:09:26,442 INFO L226 Difference]: Without dead ends: 1180 [2018-04-13 00:09:26,442 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 272 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=597, Invalid=1383, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:09:26,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1180 states. [2018-04-13 00:09:26,462 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1180 to 511. [2018-04-13 00:09:26,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:26,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:26,464 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 2011 [2018-04-13 00:09:26,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:26,464 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:26,464 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:26,464 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:26,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2018 [2018-04-13 00:09:26,480 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:26,481 INFO L355 BasicCegarLoop]: trace histogram [307, 281, 281, 281, 281, 281, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:26,481 INFO L408 AbstractCegarLoop]: === Iteration 146 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:26,481 INFO L82 PathProgramCache]: Analyzing trace with hash -1436596489, now seen corresponding path program 135 times [2018-04-13 00:09:26,481 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:26,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:26,576 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:27,945 INFO L134 CoverageAnalysis]: Checked inductivity of 254604 backedges. 23730 proven. 7707 refuted. 0 times theorem prover too weak. 223167 trivial. 0 not checked. [2018-04-13 00:09:27,945 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:27,945 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:27,945 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:27,946 INFO L134 CoverageAnalysis]: Checked inductivity of 14811 backedges. 1255 proven. 330 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:27,946 INFO L182 omatonBuilderFactory]: Interpolants [147714#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 147715#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 147712#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 147713#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 147718#(<= main_~i~1 18), 147719#(<= main_~i~1 19), 147716#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 147717#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 147722#(<= main_~i~1 22), 147720#(<= main_~i~1 20), 147721#(<= main_~i~1 21), 147698#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 147699#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 147696#true, 147697#false, 147702#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 147703#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 147700#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 147701#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 147706#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 147707#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 147704#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 147705#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 147710#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 147711#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 147708#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 147709#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11))] [2018-04-13 00:09:27,951 INFO L134 CoverageAnalysis]: Checked inductivity of 254604 backedges. 23730 proven. 7707 refuted. 0 times theorem prover too weak. 223167 trivial. 0 not checked. [2018-04-13 00:09:27,951 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:27,951 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:27,951 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=232, Invalid=470, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:27,951 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:28,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:28,326 INFO L93 Difference]: Finished difference Result 1081 states and 2425 transitions. [2018-04-13 00:09:28,326 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-04-13 00:09:28,326 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 2017 [2018-04-13 00:09:28,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:28,332 INFO L225 Difference]: With dead ends: 1081 [2018-04-13 00:09:28,332 INFO L226 Difference]: Without dead ends: 1081 [2018-04-13 00:09:28,332 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 279 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=650, Invalid=1420, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:09:28,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1081 states. [2018-04-13 00:09:28,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1081 to 511. [2018-04-13 00:09:28,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:28,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:28,348 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 2017 [2018-04-13 00:09:28,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:28,348 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:28,349 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:28,349 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:28,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2024 [2018-04-13 00:09:28,364 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:28,364 INFO L355 BasicCegarLoop]: trace histogram [308, 282, 282, 282, 282, 282, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:28,364 INFO L408 AbstractCegarLoop]: === Iteration 147 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:28,364 INFO L82 PathProgramCache]: Analyzing trace with hash -90762305, now seen corresponding path program 136 times [2018-04-13 00:09:28,364 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:28,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:28,447 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:29,774 INFO L134 CoverageAnalysis]: Checked inductivity of 256342 backedges. 27119 proven. 5920 refuted. 0 times theorem prover too weak. 223303 trivial. 0 not checked. [2018-04-13 00:09:29,774 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:29,774 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:29,774 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:29,775 INFO L134 CoverageAnalysis]: Checked inductivity of 14829 backedges. 1371 proven. 232 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:29,775 INFO L182 omatonBuilderFactory]: Interpolants [149378#(<= main_~i~1 21), 149379#(<= main_~i~1 22), 149376#(<= main_~i~1 19), 149377#(<= main_~i~1 20), 149354#false, 149355#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 149353#true, 149358#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 149359#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 149356#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 149357#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 149362#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 149363#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 149360#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 149361#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 149366#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 149367#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 149364#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 149365#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 149370#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 149371#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 149368#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 149369#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 149374#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 149375#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 149372#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 149373#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18))] [2018-04-13 00:09:29,780 INFO L134 CoverageAnalysis]: Checked inductivity of 256342 backedges. 27119 proven. 5920 refuted. 0 times theorem prover too weak. 223303 trivial. 0 not checked. [2018-04-13 00:09:29,780 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:29,780 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:29,780 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=247, Invalid=455, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:29,780 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:30,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:30,178 INFO L93 Difference]: Finished difference Result 970 states and 2102 transitions. [2018-04-13 00:09:30,178 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:09:30,178 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 2023 [2018-04-13 00:09:30,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:30,184 INFO L225 Difference]: With dead ends: 970 [2018-04-13 00:09:30,184 INFO L226 Difference]: Without dead ends: 970 [2018-04-13 00:09:30,185 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=707, Invalid=1455, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:09:30,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 970 states. [2018-04-13 00:09:30,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 970 to 511. [2018-04-13 00:09:30,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:30,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:30,202 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 2023 [2018-04-13 00:09:30,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:30,202 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:30,202 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:30,203 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:30,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2030 [2018-04-13 00:09:30,219 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:30,219 INFO L355 BasicCegarLoop]: trace histogram [309, 283, 283, 283, 283, 283, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:30,219 INFO L408 AbstractCegarLoop]: === Iteration 148 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:30,219 INFO L82 PathProgramCache]: Analyzing trace with hash -2145623609, now seen corresponding path program 137 times [2018-04-13 00:09:30,220 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:30,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:30,318 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:31,826 INFO L134 CoverageAnalysis]: Checked inductivity of 258086 backedges. 30850 proven. 3791 refuted. 0 times theorem prover too weak. 223445 trivial. 0 not checked. [2018-04-13 00:09:31,827 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:31,827 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:31,827 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:31,828 INFO L134 CoverageAnalysis]: Checked inductivity of 14841 backedges. 1493 proven. 122 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:31,828 INFO L182 omatonBuilderFactory]: Interpolants [150914#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 150915#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 150912#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 150913#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 150918#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 150919#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 150916#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 150917#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 150922#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 150923#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 150920#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 150921#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 150926#(<= main_~i~1 21), 150927#(<= main_~i~1 22), 150924#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 150925#(<= main_~i~1 20), 150902#false, 150903#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 150901#true, 150906#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 150907#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 150904#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 150905#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 150910#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 150911#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 150908#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 150909#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6))] [2018-04-13 00:09:31,833 INFO L134 CoverageAnalysis]: Checked inductivity of 258086 backedges. 30850 proven. 3791 refuted. 0 times theorem prover too weak. 223445 trivial. 0 not checked. [2018-04-13 00:09:31,833 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:31,833 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:31,833 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=264, Invalid=438, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:31,833 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:32,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:32,205 INFO L93 Difference]: Finished difference Result 851 states and 1743 transitions. [2018-04-13 00:09:32,206 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:09:32,206 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 2029 [2018-04-13 00:09:32,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:32,211 INFO L225 Difference]: With dead ends: 851 [2018-04-13 00:09:32,211 INFO L226 Difference]: Without dead ends: 851 [2018-04-13 00:09:32,212 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 290 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=768, Invalid=1488, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:09:32,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 851 states. [2018-04-13 00:09:32,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 851 to 511. [2018-04-13 00:09:32,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 511 states. [2018-04-13 00:09:32,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 511 states to 511 states and 824 transitions. [2018-04-13 00:09:32,227 INFO L78 Accepts]: Start accepts. Automaton has 511 states and 824 transitions. Word has length 2029 [2018-04-13 00:09:32,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:32,227 INFO L459 AbstractCegarLoop]: Abstraction has 511 states and 824 transitions. [2018-04-13 00:09:32,227 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:32,227 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 824 transitions. [2018-04-13 00:09:32,244 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2036 [2018-04-13 00:09:32,244 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:32,245 INFO L355 BasicCegarLoop]: trace histogram [310, 284, 284, 284, 284, 284, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:32,245 INFO L408 AbstractCegarLoop]: === Iteration 149 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:32,245 INFO L82 PathProgramCache]: Analyzing trace with hash 2065461519, now seen corresponding path program 138 times [2018-04-13 00:09:32,245 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:32,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:32,344 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:35,377 INFO L134 CoverageAnalysis]: Checked inductivity of 259836 backedges. 34941 proven. 1302 refuted. 0 times theorem prover too weak. 223593 trivial. 0 not checked. [2018-04-13 00:09:35,377 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:35,378 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-13 00:09:35,378 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:35,378 INFO L134 CoverageAnalysis]: Checked inductivity of 14847 backedges. 1621 proven. 0 refuted. 0 times theorem prover too weak. 13226 trivial. 0 not checked. [2018-04-13 00:09:35,378 INFO L182 omatonBuilderFactory]: Interpolants [152334#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 152335#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 152332#true, 152333#false, 152338#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 152339#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 152336#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 152337#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 152342#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 152343#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 152340#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 152341#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 152346#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 152347#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 152344#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 152345#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 152350#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 152351#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 152348#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 152349#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 152354#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 152355#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 152352#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 152353#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 152358#(<= main_~i~1 22), 152356#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21), 152357#(<= main_~i~1 21)] [2018-04-13 00:09:35,383 INFO L134 CoverageAnalysis]: Checked inductivity of 259836 backedges. 34941 proven. 1302 refuted. 0 times theorem prover too weak. 223593 trivial. 0 not checked. [2018-04-13 00:09:35,383 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-13 00:09:35,383 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-13 00:09:35,383 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=283, Invalid=419, Unknown=0, NotChecked=0, Total=702 [2018-04-13 00:09:35,384 INFO L87 Difference]: Start difference. First operand 511 states and 824 transitions. Second operand 27 states. [2018-04-13 00:09:35,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:35,773 INFO L93 Difference]: Finished difference Result 725 states and 1395 transitions. [2018-04-13 00:09:35,773 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-04-13 00:09:35,774 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 2035 [2018-04-13 00:09:35,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:35,777 INFO L225 Difference]: With dead ends: 725 [2018-04-13 00:09:35,777 INFO L226 Difference]: Without dead ends: 725 [2018-04-13 00:09:35,777 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 294 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=833, Invalid=1519, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:09:35,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 725 states. [2018-04-13 00:09:35,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 725 to 520. [2018-04-13 00:09:35,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 520 states. [2018-04-13 00:09:35,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 520 states to 520 states and 857 transitions. [2018-04-13 00:09:35,786 INFO L78 Accepts]: Start accepts. Automaton has 520 states and 857 transitions. Word has length 2035 [2018-04-13 00:09:35,787 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:35,787 INFO L459 AbstractCegarLoop]: Abstraction has 520 states and 857 transitions. [2018-04-13 00:09:35,787 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-13 00:09:35,787 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 857 transitions. [2018-04-13 00:09:35,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2042 [2018-04-13 00:09:35,803 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:35,803 INFO L355 BasicCegarLoop]: trace histogram [311, 285, 285, 285, 285, 285, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:35,803 INFO L408 AbstractCegarLoop]: === Iteration 150 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:35,803 INFO L82 PathProgramCache]: Analyzing trace with hash -2040860265, now seen corresponding path program 139 times [2018-04-13 00:09:35,804 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:35,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:35,888 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:37,129 INFO L134 CoverageAnalysis]: Checked inductivity of 261592 backedges. 6294 proven. 14847 refuted. 0 times theorem prover too weak. 240451 trivial. 0 not checked. [2018-04-13 00:09:37,129 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:37,129 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:37,129 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:37,130 INFO L134 CoverageAnalysis]: Checked inductivity of 14844 backedges. 413 proven. 893 refuted. 0 times theorem prover too weak. 13538 trivial. 0 not checked. [2018-04-13 00:09:37,130 INFO L182 omatonBuilderFactory]: Interpolants [153666#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 153667#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 153664#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 153665#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 153670#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 153671#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 153668#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 153669#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 153674#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 153675#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 11), 153672#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 153673#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 153650#(<= 0 main_~i~1), 153651#(<= 1 main_~i~1), 153648#true, 153649#false, 153654#(<= 4 main_~i~1), 153655#(<= 5 main_~i~1), 153652#(<= 2 main_~i~1), 153653#(<= 3 main_~i~1), 153658#(<= 8 main_~i~1), 153659#(<= 9 main_~i~1), 153656#(<= 6 main_~i~1), 153657#(<= 7 main_~i~1), 153662#(<= 12 main_~i~1), 153663#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 153660#(<= 10 main_~i~1), 153661#(<= 11 main_~i~1)] [2018-04-13 00:09:37,134 INFO L134 CoverageAnalysis]: Checked inductivity of 261592 backedges. 6294 proven. 14847 refuted. 0 times theorem prover too weak. 240451 trivial. 0 not checked. [2018-04-13 00:09:37,134 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:37,135 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:37,135 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=559, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:37,135 INFO L87 Difference]: Start difference. First operand 520 states and 857 transitions. Second operand 28 states. [2018-04-13 00:09:37,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:37,594 INFO L93 Difference]: Finished difference Result 583 states and 917 transitions. [2018-04-13 00:09:37,595 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2018-04-13 00:09:37,595 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2041 [2018-04-13 00:09:37,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:37,596 INFO L225 Difference]: With dead ends: 583 [2018-04-13 00:09:37,596 INFO L226 Difference]: Without dead ends: 583 [2018-04-13 00:09:37,596 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 377 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=377, Invalid=1183, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:09:37,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 583 states. [2018-04-13 00:09:37,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 583 to 523. [2018-04-13 00:09:37,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 523 states. [2018-04-13 00:09:37,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 523 states to 523 states and 869 transitions. [2018-04-13 00:09:37,603 INFO L78 Accepts]: Start accepts. Automaton has 523 states and 869 transitions. Word has length 2041 [2018-04-13 00:09:37,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:37,603 INFO L459 AbstractCegarLoop]: Abstraction has 523 states and 869 transitions. [2018-04-13 00:09:37,603 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:37,603 INFO L276 IsEmpty]: Start isEmpty. Operand 523 states and 869 transitions. [2018-04-13 00:09:37,619 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2066 [2018-04-13 00:09:37,619 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:37,619 INFO L355 BasicCegarLoop]: trace histogram [315, 289, 289, 289, 289, 289, 27, 26, 26, 26, 26, 26, 26, 26, 26, 26, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:37,619 INFO L408 AbstractCegarLoop]: === Iteration 151 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:37,619 INFO L82 PathProgramCache]: Analyzing trace with hash -559355337, now seen corresponding path program 140 times [2018-04-13 00:09:37,620 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:37,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:37,714 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:39,051 INFO L134 CoverageAnalysis]: Checked inductivity of 268676 backedges. 0 proven. 2002 refuted. 0 times theorem prover too weak. 266674 trivial. 0 not checked. [2018-04-13 00:09:39,051 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:39,052 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:09:39,052 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:39,052 INFO L134 CoverageAnalysis]: Checked inductivity of 15108 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15108 trivial. 0 not checked. [2018-04-13 00:09:39,053 INFO L182 omatonBuilderFactory]: Interpolants [154818#(<= main_~i~1 10), 154819#(<= main_~i~1 11), 154816#(<= main_~i~1 8), 154817#(<= main_~i~1 9), 154822#(<= main_~i~1 14), 154823#(<= main_~i~1 15), 154820#(<= main_~i~1 12), 154821#(<= main_~i~1 13), 154826#(<= main_~i~1 18), 154827#(<= main_~i~1 19), 154824#(<= main_~i~1 16), 154825#(<= main_~i~1 17), 154830#(<= main_~i~1 22), 154831#(<= main_~i~1 23), 154828#(<= main_~i~1 20), 154829#(<= main_~i~1 21), 154834#(<= main_~i~1 26), 154832#(<= main_~i~1 24), 154833#(<= main_~i~1 25), 154806#true, 154807#false, 154810#(<= main_~i~1 2), 154811#(<= main_~i~1 3), 154808#(= main_~i~1 0), 154809#(<= main_~i~1 1), 154814#(<= main_~i~1 6), 154815#(<= main_~i~1 7), 154812#(<= main_~i~1 4), 154813#(<= main_~i~1 5)] [2018-04-13 00:09:39,057 INFO L134 CoverageAnalysis]: Checked inductivity of 268676 backedges. 0 proven. 2002 refuted. 0 times theorem prover too weak. 266674 trivial. 0 not checked. [2018-04-13 00:09:39,057 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:09:39,057 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:09:39,057 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=406, Invalid=406, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:09:39,057 INFO L87 Difference]: Start difference. First operand 523 states and 869 transitions. Second operand 29 states. [2018-04-13 00:09:39,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:39,263 INFO L93 Difference]: Finished difference Result 1082 states and 2118 transitions. [2018-04-13 00:09:39,263 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2018-04-13 00:09:39,263 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2065 [2018-04-13 00:09:39,264 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:39,269 INFO L225 Difference]: With dead ends: 1082 [2018-04-13 00:09:39,269 INFO L226 Difference]: Without dead ends: 1082 [2018-04-13 00:09:39,269 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=406, Invalid=406, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:09:39,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1082 states. [2018-04-13 00:09:39,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1082 to 534. [2018-04-13 00:09:39,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:39,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:39,284 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2065 [2018-04-13 00:09:39,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:39,285 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:39,285 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:09:39,285 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:39,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2150 [2018-04-13 00:09:39,303 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:39,303 INFO L355 BasicCegarLoop]: trace histogram [328, 301, 301, 301, 301, 301, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:39,303 INFO L408 AbstractCegarLoop]: === Iteration 152 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:39,303 INFO L82 PathProgramCache]: Analyzing trace with hash -1143620840, now seen corresponding path program 141 times [2018-04-13 00:09:39,304 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:39,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:39,398 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:40,913 INFO L134 CoverageAnalysis]: Checked inductivity of 291420 backedges. 9966 proven. 13970 refuted. 0 times theorem prover too weak. 267484 trivial. 0 not checked. [2018-04-13 00:09:40,914 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:40,914 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:40,914 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:40,915 INFO L134 CoverageAnalysis]: Checked inductivity of 16590 backedges. 718 proven. 740 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:40,915 INFO L182 omatonBuilderFactory]: Interpolants [156451#true, 156454#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 156455#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 156452#false, 156453#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 156458#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 156459#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 156456#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 156457#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 156462#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 156463#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 156460#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 156461#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 156466#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 156467#(<= main_~i~1 12), 156464#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 156465#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 156470#(<= main_~i~1 15), 156471#(<= main_~i~1 16), 156468#(<= main_~i~1 13), 156469#(<= main_~i~1 14), 156474#(<= main_~i~1 19), 156475#(<= main_~i~1 20), 156472#(<= main_~i~1 17), 156473#(<= main_~i~1 18), 156478#(<= main_~i~1 23), 156476#(<= main_~i~1 21), 156477#(<= main_~i~1 22)] [2018-04-13 00:09:40,920 INFO L134 CoverageAnalysis]: Checked inductivity of 291420 backedges. 9966 proven. 13970 refuted. 0 times theorem prover too weak. 267484 trivial. 0 not checked. [2018-04-13 00:09:40,920 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:40,920 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:40,921 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=559, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:40,921 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:41,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:41,367 INFO L93 Difference]: Finished difference Result 1610 states and 3925 transitions. [2018-04-13 00:09:41,367 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-04-13 00:09:41,368 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2149 [2018-04-13 00:09:41,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:41,379 INFO L225 Difference]: With dead ends: 1610 [2018-04-13 00:09:41,380 INFO L226 Difference]: Without dead ends: 1610 [2018-04-13 00:09:41,380 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 234 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=405, Invalid=1235, Unknown=0, NotChecked=0, Total=1640 [2018-04-13 00:09:41,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1610 states. [2018-04-13 00:09:41,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1610 to 534. [2018-04-13 00:09:41,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:41,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:41,415 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2149 [2018-04-13 00:09:41,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:41,416 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:41,416 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:41,416 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:41,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2156 [2018-04-13 00:09:41,435 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:41,435 INFO L355 BasicCegarLoop]: trace histogram [329, 302, 302, 302, 302, 302, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:41,435 INFO L408 AbstractCegarLoop]: === Iteration 153 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:41,435 INFO L82 PathProgramCache]: Analyzing trace with hash 935934048, now seen corresponding path program 142 times [2018-04-13 00:09:41,436 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:41,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:41,543 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:43,094 INFO L134 CoverageAnalysis]: Checked inductivity of 293280 backedges. 11711 proven. 13985 refuted. 0 times theorem prover too weak. 267584 trivial. 0 not checked. [2018-04-13 00:09:43,094 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:43,095 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:43,095 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:43,096 INFO L134 CoverageAnalysis]: Checked inductivity of 16641 backedges. 789 proven. 720 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:43,096 INFO L182 omatonBuilderFactory]: Interpolants [158658#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 158659#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 158656#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 158657#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 158662#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 158663#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 158660#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 158661#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 158666#(<= main_~i~1 13), 158667#(<= main_~i~1 14), 158664#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 158665#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 158670#(<= main_~i~1 17), 158671#(<= main_~i~1 18), 158668#(<= main_~i~1 15), 158669#(<= main_~i~1 16), 158674#(<= main_~i~1 21), 158675#(<= main_~i~1 22), 158672#(<= main_~i~1 19), 158673#(<= main_~i~1 20), 158676#(<= main_~i~1 23), 158650#false, 158651#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 158649#true, 158654#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 158655#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 158652#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 158653#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:09:43,101 INFO L134 CoverageAnalysis]: Checked inductivity of 293280 backedges. 11711 proven. 13985 refuted. 0 times theorem prover too weak. 267584 trivial. 0 not checked. [2018-04-13 00:09:43,101 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:43,101 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:43,101 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=199, Invalid=557, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:43,101 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:43,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:43,522 INFO L93 Difference]: Finished difference Result 1577 states and 3838 transitions. [2018-04-13 00:09:43,524 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:09:43,525 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2155 [2018-04-13 00:09:43,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:43,540 INFO L225 Difference]: With dead ends: 1577 [2018-04-13 00:09:43,540 INFO L226 Difference]: Without dead ends: 1577 [2018-04-13 00:09:43,541 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 247 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=437, Invalid=1285, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:09:43,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1577 states. [2018-04-13 00:09:43,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1577 to 534. [2018-04-13 00:09:43,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:43,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:43,586 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2155 [2018-04-13 00:09:43,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:43,586 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:43,586 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:43,587 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:43,611 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2162 [2018-04-13 00:09:43,611 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:43,611 INFO L355 BasicCegarLoop]: trace histogram [330, 303, 303, 303, 303, 303, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:43,611 INFO L408 AbstractCegarLoop]: === Iteration 154 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:43,611 INFO L82 PathProgramCache]: Analyzing trace with hash 1823827688, now seen corresponding path program 143 times [2018-04-13 00:09:43,611 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:43,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:43,706 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:45,168 INFO L134 CoverageAnalysis]: Checked inductivity of 295146 backedges. 13690 proven. 13766 refuted. 0 times theorem prover too weak. 267690 trivial. 0 not checked. [2018-04-13 00:09:45,169 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:45,169 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:45,169 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:45,170 INFO L134 CoverageAnalysis]: Checked inductivity of 16695 backedges. 875 proven. 688 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:45,170 INFO L182 omatonBuilderFactory]: Interpolants [160834#(<= main_~i~1 14), 160835#(<= main_~i~1 15), 160832#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 160833#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 160838#(<= main_~i~1 18), 160839#(<= main_~i~1 19), 160836#(<= main_~i~1 16), 160837#(<= main_~i~1 17), 160842#(<= main_~i~1 22), 160843#(<= main_~i~1 23), 160840#(<= main_~i~1 20), 160841#(<= main_~i~1 21), 160818#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 160819#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 160816#true, 160817#false, 160822#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 160823#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 160820#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 160821#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 160826#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 160827#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 160824#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 160825#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 160830#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 160831#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 160828#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 160829#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11))] [2018-04-13 00:09:45,174 INFO L134 CoverageAnalysis]: Checked inductivity of 295146 backedges. 13690 proven. 13766 refuted. 0 times theorem prover too weak. 267690 trivial. 0 not checked. [2018-04-13 00:09:45,175 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:45,175 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:45,175 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=203, Invalid=553, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:45,175 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:45,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:45,509 INFO L93 Difference]: Finished difference Result 1532 states and 3717 transitions. [2018-04-13 00:09:45,509 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2018-04-13 00:09:45,509 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2161 [2018-04-13 00:09:45,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:45,519 INFO L225 Difference]: With dead ends: 1532 [2018-04-13 00:09:45,519 INFO L226 Difference]: Without dead ends: 1532 [2018-04-13 00:09:45,519 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=473, Invalid=1333, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:09:45,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1532 states. [2018-04-13 00:09:45,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1532 to 534. [2018-04-13 00:09:45,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:45,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:45,545 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2161 [2018-04-13 00:09:45,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:45,545 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:45,545 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:45,545 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:45,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2168 [2018-04-13 00:09:45,563 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:45,563 INFO L355 BasicCegarLoop]: trace histogram [331, 304, 304, 304, 304, 304, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:45,563 INFO L408 AbstractCegarLoop]: === Iteration 155 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:45,563 INFO L82 PathProgramCache]: Analyzing trace with hash 1199892144, now seen corresponding path program 144 times [2018-04-13 00:09:45,563 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:45,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:45,648 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:47,193 INFO L134 CoverageAnalysis]: Checked inductivity of 297018 backedges. 15921 proven. 13295 refuted. 0 times theorem prover too weak. 267802 trivial. 0 not checked. [2018-04-13 00:09:47,193 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:47,193 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:47,193 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:47,194 INFO L134 CoverageAnalysis]: Checked inductivity of 16743 backedges. 967 proven. 644 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:47,194 INFO L182 omatonBuilderFactory]: Interpolants [162946#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 162947#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 162944#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 162945#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 162950#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 162951#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 162948#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 162949#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 162954#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 162955#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 162952#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 162953#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 162958#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 162959#(<= main_~i~1 15), 162956#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 162957#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 162962#(<= main_~i~1 18), 162963#(<= main_~i~1 19), 162960#(<= main_~i~1 16), 162961#(<= main_~i~1 17), 162966#(<= main_~i~1 22), 162967#(<= main_~i~1 23), 162964#(<= main_~i~1 20), 162965#(<= main_~i~1 21), 162942#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 162943#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 162940#true, 162941#false] [2018-04-13 00:09:47,199 INFO L134 CoverageAnalysis]: Checked inductivity of 297018 backedges. 15921 proven. 13295 refuted. 0 times theorem prover too weak. 267802 trivial. 0 not checked. [2018-04-13 00:09:47,199 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:47,199 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:47,200 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=209, Invalid=547, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:47,200 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:47,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:47,636 INFO L93 Difference]: Finished difference Result 1475 states and 3561 transitions. [2018-04-13 00:09:47,636 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2018-04-13 00:09:47,636 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2167 [2018-04-13 00:09:47,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:47,647 INFO L225 Difference]: With dead ends: 1475 [2018-04-13 00:09:47,647 INFO L226 Difference]: Without dead ends: 1475 [2018-04-13 00:09:47,647 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 270 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=513, Invalid=1379, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:09:47,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1475 states. [2018-04-13 00:09:47,671 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1475 to 534. [2018-04-13 00:09:47,672 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:47,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:47,673 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2167 [2018-04-13 00:09:47,674 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:47,674 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:47,674 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:47,674 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:47,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2174 [2018-04-13 00:09:47,692 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:47,692 INFO L355 BasicCegarLoop]: trace histogram [332, 305, 305, 305, 305, 305, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:47,692 INFO L408 AbstractCegarLoop]: === Iteration 156 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:47,692 INFO L82 PathProgramCache]: Analyzing trace with hash -1345534024, now seen corresponding path program 145 times [2018-04-13 00:09:47,693 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:47,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:47,790 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:49,346 INFO L134 CoverageAnalysis]: Checked inductivity of 298896 backedges. 18422 proven. 12554 refuted. 0 times theorem prover too weak. 267920 trivial. 0 not checked. [2018-04-13 00:09:49,347 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:49,347 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:49,347 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:49,348 INFO L134 CoverageAnalysis]: Checked inductivity of 16785 backedges. 1065 proven. 588 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:49,348 INFO L182 omatonBuilderFactory]: Interpolants [165010#false, 165011#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 165009#true, 165014#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 165015#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 165012#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 165013#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 165018#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 165019#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 165016#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 165017#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 165022#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 165023#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 165020#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 165021#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 165026#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 165027#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 165024#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 165025#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 165030#(<= main_~i~1 17), 165031#(<= main_~i~1 18), 165028#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 165029#(<= main_~i~1 16), 165034#(<= main_~i~1 21), 165035#(<= main_~i~1 22), 165032#(<= main_~i~1 19), 165033#(<= main_~i~1 20), 165036#(<= main_~i~1 23)] [2018-04-13 00:09:49,353 INFO L134 CoverageAnalysis]: Checked inductivity of 298896 backedges. 18422 proven. 12554 refuted. 0 times theorem prover too weak. 267920 trivial. 0 not checked. [2018-04-13 00:09:49,353 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:49,353 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:49,353 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=539, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:49,354 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:49,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:49,765 INFO L93 Difference]: Finished difference Result 1406 states and 3369 transitions. [2018-04-13 00:09:49,765 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:09:49,765 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2173 [2018-04-13 00:09:49,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:49,774 INFO L225 Difference]: With dead ends: 1406 [2018-04-13 00:09:49,774 INFO L226 Difference]: Without dead ends: 1406 [2018-04-13 00:09:49,775 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 280 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=557, Invalid=1423, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:09:49,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1406 states. [2018-04-13 00:09:49,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1406 to 534. [2018-04-13 00:09:49,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:49,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:49,804 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2173 [2018-04-13 00:09:49,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:49,805 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:49,805 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:49,806 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:49,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2180 [2018-04-13 00:09:49,834 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:49,835 INFO L355 BasicCegarLoop]: trace histogram [333, 306, 306, 306, 306, 306, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:49,835 INFO L408 AbstractCegarLoop]: === Iteration 157 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:49,835 INFO L82 PathProgramCache]: Analyzing trace with hash -302478848, now seen corresponding path program 146 times [2018-04-13 00:09:49,836 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:49,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:49,995 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:51,801 INFO L134 CoverageAnalysis]: Checked inductivity of 300780 backedges. 21211 proven. 11525 refuted. 0 times theorem prover too weak. 268044 trivial. 0 not checked. [2018-04-13 00:09:51,801 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:51,802 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:51,802 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:51,802 INFO L134 CoverageAnalysis]: Checked inductivity of 16821 backedges. 1169 proven. 520 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:51,802 INFO L182 omatonBuilderFactory]: Interpolants [167011#true, 167014#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 167015#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 167012#false, 167013#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 167018#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 167019#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 167016#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 167017#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 167022#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 167023#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 167020#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 167021#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 167026#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 167027#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 167024#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 167025#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 167030#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 167031#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 167028#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 167029#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 167034#(<= main_~i~1 19), 167035#(<= main_~i~1 20), 167032#(<= main_~i~1 17), 167033#(<= main_~i~1 18), 167038#(<= main_~i~1 23), 167036#(<= main_~i~1 21), 167037#(<= main_~i~1 22)] [2018-04-13 00:09:51,807 INFO L134 CoverageAnalysis]: Checked inductivity of 300780 backedges. 21211 proven. 11525 refuted. 0 times theorem prover too weak. 268044 trivial. 0 not checked. [2018-04-13 00:09:51,808 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:51,808 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:51,808 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=227, Invalid=529, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:51,808 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:52,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:52,211 INFO L93 Difference]: Finished difference Result 1325 states and 3140 transitions. [2018-04-13 00:09:52,211 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-04-13 00:09:52,211 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2179 [2018-04-13 00:09:52,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:52,219 INFO L225 Difference]: With dead ends: 1325 [2018-04-13 00:09:52,219 INFO L226 Difference]: Without dead ends: 1325 [2018-04-13 00:09:52,219 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 289 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=605, Invalid=1465, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:09:52,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1325 states. [2018-04-13 00:09:52,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1325 to 534. [2018-04-13 00:09:52,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:52,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:52,240 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2179 [2018-04-13 00:09:52,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:52,240 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:52,240 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:52,240 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:52,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2186 [2018-04-13 00:09:52,258 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:52,258 INFO L355 BasicCegarLoop]: trace histogram [334, 307, 307, 307, 307, 307, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:52,258 INFO L408 AbstractCegarLoop]: === Iteration 158 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:52,258 INFO L82 PathProgramCache]: Analyzing trace with hash -1288561272, now seen corresponding path program 147 times [2018-04-13 00:09:52,259 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:52,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:52,360 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:53,859 INFO L134 CoverageAnalysis]: Checked inductivity of 302670 backedges. 24306 proven. 10190 refuted. 0 times theorem prover too weak. 268174 trivial. 0 not checked. [2018-04-13 00:09:53,859 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:53,859 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:53,859 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:53,860 INFO L134 CoverageAnalysis]: Checked inductivity of 16851 backedges. 1279 proven. 440 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:53,860 INFO L182 omatonBuilderFactory]: Interpolants [168960#(<= main_~i~1 22), 168961#(<= main_~i~1 23), 168934#true, 168935#false, 168938#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 168939#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 168936#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 168937#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 168942#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 168943#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 168940#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 168941#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 168946#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 168947#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 168944#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 168945#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 168950#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 168951#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 168948#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 168949#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 168954#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 168955#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 168952#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 168953#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 168958#(<= main_~i~1 20), 168959#(<= main_~i~1 21), 168956#(<= main_~i~1 18), 168957#(<= main_~i~1 19)] [2018-04-13 00:09:53,865 INFO L134 CoverageAnalysis]: Checked inductivity of 302670 backedges. 24306 proven. 10190 refuted. 0 times theorem prover too weak. 268174 trivial. 0 not checked. [2018-04-13 00:09:53,865 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:53,865 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:53,866 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=517, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:53,866 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:54,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:54,330 INFO L93 Difference]: Finished difference Result 1232 states and 2873 transitions. [2018-04-13 00:09:54,330 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:09:54,330 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2185 [2018-04-13 00:09:54,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:54,339 INFO L225 Difference]: With dead ends: 1232 [2018-04-13 00:09:54,339 INFO L226 Difference]: Without dead ends: 1232 [2018-04-13 00:09:54,340 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=657, Invalid=1505, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:09:54,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1232 states. [2018-04-13 00:09:54,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1232 to 534. [2018-04-13 00:09:54,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:54,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:54,369 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2185 [2018-04-13 00:09:54,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:54,371 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:54,371 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:54,371 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:54,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2192 [2018-04-13 00:09:54,399 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:54,399 INFO L355 BasicCegarLoop]: trace histogram [335, 308, 308, 308, 308, 308, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:54,399 INFO L408 AbstractCegarLoop]: === Iteration 159 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:54,400 INFO L82 PathProgramCache]: Analyzing trace with hash -955915696, now seen corresponding path program 148 times [2018-04-13 00:09:54,400 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:54,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:54,543 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:56,187 INFO L134 CoverageAnalysis]: Checked inductivity of 304566 backedges. 27725 proven. 8531 refuted. 0 times theorem prover too weak. 268310 trivial. 0 not checked. [2018-04-13 00:09:56,188 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:56,188 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:56,188 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:56,189 INFO L134 CoverageAnalysis]: Checked inductivity of 16875 backedges. 1395 proven. 348 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:56,189 INFO L182 omatonBuilderFactory]: Interpolants [170766#true, 170767#false, 170770#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 170771#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 170768#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 170769#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 170774#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 170775#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 170772#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 170773#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 170778#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 170779#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 170776#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 170777#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 170782#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 170783#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 170780#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 170781#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 170786#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 170787#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 170784#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 170785#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 170790#(<= main_~i~1 20), 170791#(<= main_~i~1 21), 170788#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 170789#(<= main_~i~1 19), 170792#(<= main_~i~1 22), 170793#(<= main_~i~1 23)] [2018-04-13 00:09:56,194 INFO L134 CoverageAnalysis]: Checked inductivity of 304566 backedges. 27725 proven. 8531 refuted. 0 times theorem prover too weak. 268310 trivial. 0 not checked. [2018-04-13 00:09:56,194 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:56,194 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:56,194 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=503, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:56,194 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:56,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:56,624 INFO L93 Difference]: Finished difference Result 1127 states and 2567 transitions. [2018-04-13 00:09:56,625 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:09:56,625 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2191 [2018-04-13 00:09:56,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:56,631 INFO L225 Difference]: With dead ends: 1127 [2018-04-13 00:09:56,632 INFO L226 Difference]: Without dead ends: 1127 [2018-04-13 00:09:56,632 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 304 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=713, Invalid=1543, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:09:56,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1127 states. [2018-04-13 00:09:56,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1127 to 534. [2018-04-13 00:09:56,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:56,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:56,650 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2191 [2018-04-13 00:09:56,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:56,650 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:56,650 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:56,650 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:56,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2198 [2018-04-13 00:09:56,669 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:56,669 INFO L355 BasicCegarLoop]: trace histogram [336, 309, 309, 309, 309, 309, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:56,669 INFO L408 AbstractCegarLoop]: === Iteration 160 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:56,669 INFO L82 PathProgramCache]: Analyzing trace with hash -809326504, now seen corresponding path program 149 times [2018-04-13 00:09:56,669 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:56,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:56,767 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:09:58,415 INFO L134 CoverageAnalysis]: Checked inductivity of 306468 backedges. 31486 proven. 6530 refuted. 0 times theorem prover too weak. 268452 trivial. 0 not checked. [2018-04-13 00:09:58,415 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:09:58,416 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:09:58,416 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:09:58,416 INFO L134 CoverageAnalysis]: Checked inductivity of 16893 backedges. 1517 proven. 244 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:09:58,416 INFO L182 omatonBuilderFactory]: Interpolants [172495#true, 172498#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 172499#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 172496#false, 172497#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 172502#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 172503#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 172500#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 172501#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 172506#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 172507#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 172504#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 172505#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 172510#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 172511#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 172508#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 172509#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 172514#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 172515#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 172512#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 172513#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 172518#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 172519#(<= main_~i~1 20), 172516#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 172517#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 172522#(<= main_~i~1 23), 172520#(<= main_~i~1 21), 172521#(<= main_~i~1 22)] [2018-04-13 00:09:58,422 INFO L134 CoverageAnalysis]: Checked inductivity of 306468 backedges. 31486 proven. 6530 refuted. 0 times theorem prover too weak. 268452 trivial. 0 not checked. [2018-04-13 00:09:58,422 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:09:58,422 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:09:58,422 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=269, Invalid=487, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:09:58,422 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:09:58,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:09:58,858 INFO L93 Difference]: Finished difference Result 1010 states and 2221 transitions. [2018-04-13 00:09:58,859 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-04-13 00:09:58,859 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2197 [2018-04-13 00:09:58,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:09:58,866 INFO L225 Difference]: With dead ends: 1010 [2018-04-13 00:09:58,866 INFO L226 Difference]: Without dead ends: 1010 [2018-04-13 00:09:58,866 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 310 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=773, Invalid=1579, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:09:58,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2018-04-13 00:09:58,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 534. [2018-04-13 00:09:58,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:09:58,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:09:58,889 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2197 [2018-04-13 00:09:58,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:09:58,890 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:09:58,890 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:09:58,890 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:09:58,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2204 [2018-04-13 00:09:58,922 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:09:58,922 INFO L355 BasicCegarLoop]: trace histogram [337, 310, 310, 310, 310, 310, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:09:58,922 INFO L408 AbstractCegarLoop]: === Iteration 161 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:09:58,923 INFO L82 PathProgramCache]: Analyzing trace with hash -610947168, now seen corresponding path program 150 times [2018-04-13 00:09:58,923 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:09:59,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:09:59,077 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:00,682 INFO L134 CoverageAnalysis]: Checked inductivity of 308376 backedges. 35607 proven. 4169 refuted. 0 times theorem prover too weak. 268600 trivial. 0 not checked. [2018-04-13 00:10:00,682 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:00,682 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:10:00,682 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:00,683 INFO L134 CoverageAnalysis]: Checked inductivity of 16905 backedges. 1645 proven. 128 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:10:00,683 INFO L182 omatonBuilderFactory]: Interpolants [174110#false, 174111#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 174109#true, 174114#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 174115#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 174112#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 174113#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 174118#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 174119#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 174116#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 174117#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 174122#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 174123#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 174120#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 174121#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 174126#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 174127#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 174124#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 174125#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 174130#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 174131#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 174128#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 174129#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 174134#(<= main_~i~1 21), 174135#(<= main_~i~1 22), 174132#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 174133#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21), 174136#(<= main_~i~1 23)] [2018-04-13 00:10:00,688 INFO L134 CoverageAnalysis]: Checked inductivity of 308376 backedges. 35607 proven. 4169 refuted. 0 times theorem prover too weak. 268600 trivial. 0 not checked. [2018-04-13 00:10:00,688 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:10:00,688 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:10:00,688 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=287, Invalid=469, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:10:00,689 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:10:01,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:01,090 INFO L93 Difference]: Finished difference Result 885 states and 1838 transitions. [2018-04-13 00:10:01,091 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2018-04-13 00:10:01,091 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2203 [2018-04-13 00:10:01,091 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:01,094 INFO L225 Difference]: With dead ends: 885 [2018-04-13 00:10:01,094 INFO L226 Difference]: Without dead ends: 885 [2018-04-13 00:10:01,095 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 315 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=837, Invalid=1613, Unknown=0, NotChecked=0, Total=2450 [2018-04-13 00:10:01,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 885 states. [2018-04-13 00:10:01,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 885 to 534. [2018-04-13 00:10:01,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 534 states. [2018-04-13 00:10:01,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 534 states to 534 states and 892 transitions. [2018-04-13 00:10:01,105 INFO L78 Accepts]: Start accepts. Automaton has 534 states and 892 transitions. Word has length 2203 [2018-04-13 00:10:01,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:01,106 INFO L459 AbstractCegarLoop]: Abstraction has 534 states and 892 transitions. [2018-04-13 00:10:01,106 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:10:01,106 INFO L276 IsEmpty]: Start isEmpty. Operand 534 states and 892 transitions. [2018-04-13 00:10:01,124 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2210 [2018-04-13 00:10:01,124 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:01,124 INFO L355 BasicCegarLoop]: trace histogram [338, 311, 311, 311, 311, 311, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:01,124 INFO L408 AbstractCegarLoop]: === Iteration 162 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:01,124 INFO L82 PathProgramCache]: Analyzing trace with hash -2124240856, now seen corresponding path program 151 times [2018-04-13 00:10:01,124 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:01,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:01,211 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:02,957 INFO L134 CoverageAnalysis]: Checked inductivity of 310290 backedges. 40106 proven. 1430 refuted. 0 times theorem prover too weak. 268754 trivial. 0 not checked. [2018-04-13 00:10:02,957 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:02,958 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2018-04-13 00:10:02,958 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:02,959 INFO L134 CoverageAnalysis]: Checked inductivity of 16911 backedges. 1779 proven. 0 refuted. 0 times theorem prover too weak. 15132 trivial. 0 not checked. [2018-04-13 00:10:02,959 INFO L182 omatonBuilderFactory]: Interpolants [175618#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 175619#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 175616#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 175617#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 175622#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 175623#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 175620#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 175621#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 175626#(<= main_~i~1 22), 175627#(<= main_~i~1 23), 175624#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 175625#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 22), 175602#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 175603#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 175600#true, 175601#false, 175606#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 175607#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 175604#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 175605#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 175610#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 175611#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 175608#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 175609#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 175614#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 175615#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 175612#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 175613#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11))] [2018-04-13 00:10:02,965 INFO L134 CoverageAnalysis]: Checked inductivity of 310290 backedges. 40106 proven. 1430 refuted. 0 times theorem prover too weak. 268754 trivial. 0 not checked. [2018-04-13 00:10:02,965 INFO L442 AbstractCegarLoop]: Interpolant automaton has 28 states [2018-04-13 00:10:02,965 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2018-04-13 00:10:02,965 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=307, Invalid=449, Unknown=0, NotChecked=0, Total=756 [2018-04-13 00:10:02,965 INFO L87 Difference]: Start difference. First operand 534 states and 892 transitions. Second operand 28 states. [2018-04-13 00:10:03,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:03,360 INFO L93 Difference]: Finished difference Result 753 states and 1467 transitions. [2018-04-13 00:10:03,360 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2018-04-13 00:10:03,360 INFO L78 Accepts]: Start accepts. Automaton has 28 states. Word has length 2209 [2018-04-13 00:10:03,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:03,364 INFO L225 Difference]: With dead ends: 753 [2018-04-13 00:10:03,364 INFO L226 Difference]: Without dead ends: 753 [2018-04-13 00:10:03,364 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 319 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=905, Invalid=1645, Unknown=0, NotChecked=0, Total=2550 [2018-04-13 00:10:03,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 753 states. [2018-04-13 00:10:03,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 753 to 543. [2018-04-13 00:10:03,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 543 states. [2018-04-13 00:10:03,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 926 transitions. [2018-04-13 00:10:03,374 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 926 transitions. Word has length 2209 [2018-04-13 00:10:03,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:03,375 INFO L459 AbstractCegarLoop]: Abstraction has 543 states and 926 transitions. [2018-04-13 00:10:03,375 INFO L460 AbstractCegarLoop]: Interpolant automaton has 28 states. [2018-04-13 00:10:03,375 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 926 transitions. [2018-04-13 00:10:03,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2216 [2018-04-13 00:10:03,394 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:03,394 INFO L355 BasicCegarLoop]: trace histogram [339, 312, 312, 312, 312, 312, 28, 27, 27, 27, 27, 27, 27, 27, 27, 27, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:03,394 INFO L408 AbstractCegarLoop]: === Iteration 163 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:03,394 INFO L82 PathProgramCache]: Analyzing trace with hash -514346512, now seen corresponding path program 152 times [2018-04-13 00:10:03,395 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:03,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:03,491 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:04,991 INFO L134 CoverageAnalysis]: Checked inductivity of 312210 backedges. 0 proven. 2160 refuted. 0 times theorem prover too weak. 310050 trivial. 0 not checked. [2018-04-13 00:10:04,991 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:04,991 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:04,991 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:04,992 INFO L134 CoverageAnalysis]: Checked inductivity of 16908 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16908 trivial. 0 not checked. [2018-04-13 00:10:04,992 INFO L182 omatonBuilderFactory]: Interpolants [176970#true, 176971#false, 176974#(<= main_~i~1 2), 176975#(<= main_~i~1 3), 176972#(= main_~i~1 0), 176973#(<= main_~i~1 1), 176978#(<= main_~i~1 6), 176979#(<= main_~i~1 7), 176976#(<= main_~i~1 4), 176977#(<= main_~i~1 5), 176982#(<= main_~i~1 10), 176983#(<= main_~i~1 11), 176980#(<= main_~i~1 8), 176981#(<= main_~i~1 9), 176986#(<= main_~i~1 14), 176987#(<= main_~i~1 15), 176984#(<= main_~i~1 12), 176985#(<= main_~i~1 13), 176990#(<= main_~i~1 18), 176991#(<= main_~i~1 19), 176988#(<= main_~i~1 16), 176989#(<= main_~i~1 17), 176994#(<= main_~i~1 22), 176995#(<= main_~i~1 23), 176992#(<= main_~i~1 20), 176993#(<= main_~i~1 21), 176998#(<= main_~i~1 26), 176999#(<= main_~i~1 27), 176996#(<= main_~i~1 24), 176997#(<= main_~i~1 25)] [2018-04-13 00:10:04,997 INFO L134 CoverageAnalysis]: Checked inductivity of 312210 backedges. 0 proven. 2160 refuted. 0 times theorem prover too weak. 310050 trivial. 0 not checked. [2018-04-13 00:10:04,997 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:04,997 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:04,997 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=435, Invalid=435, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:04,997 INFO L87 Difference]: Start difference. First operand 543 states and 926 transitions. Second operand 30 states. [2018-04-13 00:10:05,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:05,259 INFO L93 Difference]: Finished difference Result 1181 states and 2462 transitions. [2018-04-13 00:10:05,259 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2018-04-13 00:10:05,259 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2215 [2018-04-13 00:10:05,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:05,266 INFO L225 Difference]: With dead ends: 1181 [2018-04-13 00:10:05,266 INFO L226 Difference]: Without dead ends: 1181 [2018-04-13 00:10:05,266 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=435, Invalid=435, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:05,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1181 states. [2018-04-13 00:10:05,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1181 to 554. [2018-04-13 00:10:05,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:05,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:05,284 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2215 [2018-04-13 00:10:05,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:05,285 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:05,285 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:05,285 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:05,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2300 [2018-04-13 00:10:05,304 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:05,305 INFO L355 BasicCegarLoop]: trace histogram [352, 324, 324, 324, 324, 324, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:05,305 INFO L408 AbstractCegarLoop]: === Iteration 164 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:05,305 INFO L82 PathProgramCache]: Analyzing trace with hash -1457708015, now seen corresponding path program 153 times [2018-04-13 00:10:05,305 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:05,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:05,409 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:07,061 INFO L134 CoverageAnalysis]: Checked inductivity of 336692 backedges. 10066 proven. 15765 refuted. 0 times theorem prover too weak. 310861 trivial. 0 not checked. [2018-04-13 00:10:07,061 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:07,061 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:07,061 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:07,062 INFO L134 CoverageAnalysis]: Checked inductivity of 18465 backedges. 718 proven. 814 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:07,062 INFO L182 omatonBuilderFactory]: Interpolants [178754#(<= main_~i~1 15), 178755#(<= main_~i~1 16), 178752#(<= main_~i~1 13), 178753#(<= main_~i~1 14), 178758#(<= main_~i~1 19), 178759#(<= main_~i~1 20), 178756#(<= main_~i~1 17), 178757#(<= main_~i~1 18), 178762#(<= main_~i~1 23), 178763#(<= main_~i~1 24), 178760#(<= main_~i~1 21), 178761#(<= main_~i~1 22), 178735#true, 178738#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 178739#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 178736#false, 178737#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 178742#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 178743#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 178740#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 178741#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 178746#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 178747#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 178744#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 178745#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 178750#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 178751#(<= main_~i~1 12), 178748#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 178749#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:10:07,068 INFO L134 CoverageAnalysis]: Checked inductivity of 336692 backedges. 10066 proven. 15765 refuted. 0 times theorem prover too weak. 310861 trivial. 0 not checked. [2018-04-13 00:10:07,068 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:07,068 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:07,068 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=211, Invalid=601, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:07,068 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:07,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:07,476 INFO L93 Difference]: Finished difference Result 1725 states and 4421 transitions. [2018-04-13 00:10:07,476 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:10:07,476 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2299 [2018-04-13 00:10:07,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:07,488 INFO L225 Difference]: With dead ends: 1725 [2018-04-13 00:10:07,488 INFO L226 Difference]: Without dead ends: 1725 [2018-04-13 00:10:07,489 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 246 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=419, Invalid=1303, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:10:07,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1725 states. [2018-04-13 00:10:07,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1725 to 554. [2018-04-13 00:10:07,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:07,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:07,522 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2299 [2018-04-13 00:10:07,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:07,522 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:07,522 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:07,522 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:07,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2306 [2018-04-13 00:10:07,542 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:07,542 INFO L355 BasicCegarLoop]: trace histogram [353, 325, 325, 325, 325, 325, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:07,542 INFO L408 AbstractCegarLoop]: === Iteration 165 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:07,542 INFO L82 PathProgramCache]: Analyzing trace with hash 1004239705, now seen corresponding path program 154 times [2018-04-13 00:10:07,543 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:07,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:07,642 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:09,216 INFO L134 CoverageAnalysis]: Checked inductivity of 338692 backedges. 11817 proven. 15914 refuted. 0 times theorem prover too weak. 310961 trivial. 0 not checked. [2018-04-13 00:10:09,217 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:09,217 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:09,217 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:09,218 INFO L134 CoverageAnalysis]: Checked inductivity of 18522 backedges. 789 proven. 800 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:09,218 INFO L182 omatonBuilderFactory]: Interpolants [181070#false, 181071#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 181069#true, 181074#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 181075#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 181072#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 181073#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 181078#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 181079#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 181076#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 181077#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 181082#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 181083#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 181080#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 181081#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 181086#(<= main_~i~1 13), 181087#(<= main_~i~1 14), 181084#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 181085#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 181090#(<= main_~i~1 17), 181091#(<= main_~i~1 18), 181088#(<= main_~i~1 15), 181089#(<= main_~i~1 16), 181094#(<= main_~i~1 21), 181095#(<= main_~i~1 22), 181092#(<= main_~i~1 19), 181093#(<= main_~i~1 20), 181096#(<= main_~i~1 23), 181097#(<= main_~i~1 24)] [2018-04-13 00:10:09,223 INFO L134 CoverageAnalysis]: Checked inductivity of 338692 backedges. 11817 proven. 15914 refuted. 0 times theorem prover too weak. 310961 trivial. 0 not checked. [2018-04-13 00:10:09,223 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:09,223 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:09,223 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=212, Invalid=600, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:09,223 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:09,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:09,607 INFO L93 Difference]: Finished difference Result 1698 states and 4347 transitions. [2018-04-13 00:10:09,607 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2018-04-13 00:10:09,607 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2305 [2018-04-13 00:10:09,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:09,619 INFO L225 Difference]: With dead ends: 1698 [2018-04-13 00:10:09,619 INFO L226 Difference]: Without dead ends: 1698 [2018-04-13 00:10:09,619 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 260 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=450, Invalid=1356, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:10:09,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1698 states. [2018-04-13 00:10:09,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1698 to 554. [2018-04-13 00:10:09,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:09,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:09,653 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2305 [2018-04-13 00:10:09,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:09,654 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:09,654 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:09,654 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:09,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2312 [2018-04-13 00:10:09,673 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:09,673 INFO L355 BasicCegarLoop]: trace histogram [354, 326, 326, 326, 326, 326, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:09,673 INFO L408 AbstractCegarLoop]: === Iteration 166 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:09,673 INFO L82 PathProgramCache]: Analyzing trace with hash -6679583, now seen corresponding path program 155 times [2018-04-13 00:10:09,673 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:09,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:09,770 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:11,470 INFO L134 CoverageAnalysis]: Checked inductivity of 340698 backedges. 13802 proven. 15829 refuted. 0 times theorem prover too weak. 311067 trivial. 0 not checked. [2018-04-13 00:10:11,470 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:11,471 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:11,471 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:11,471 INFO L134 CoverageAnalysis]: Checked inductivity of 18582 backedges. 875 proven. 774 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:11,472 INFO L182 omatonBuilderFactory]: Interpolants [183378#true, 183379#false, 183382#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 183383#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 183380#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 183381#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 183386#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 183387#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 183384#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 183385#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 183390#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 183391#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 183388#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 183389#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 183394#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 183395#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 183392#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 183393#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 183398#(<= main_~i~1 16), 183399#(<= main_~i~1 17), 183396#(<= main_~i~1 14), 183397#(<= main_~i~1 15), 183402#(<= main_~i~1 20), 183403#(<= main_~i~1 21), 183400#(<= main_~i~1 18), 183401#(<= main_~i~1 19), 183406#(<= main_~i~1 24), 183404#(<= main_~i~1 22), 183405#(<= main_~i~1 23)] [2018-04-13 00:10:11,477 INFO L134 CoverageAnalysis]: Checked inductivity of 340698 backedges. 13802 proven. 15829 refuted. 0 times theorem prover too weak. 311067 trivial. 0 not checked. [2018-04-13 00:10:11,477 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:11,477 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:11,478 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=215, Invalid=597, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:11,478 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:11,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:11,932 INFO L93 Difference]: Finished difference Result 1659 states and 4237 transitions. [2018-04-13 00:10:11,932 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2018-04-13 00:10:11,932 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2311 [2018-04-13 00:10:11,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:11,944 INFO L225 Difference]: With dead ends: 1659 [2018-04-13 00:10:11,944 INFO L226 Difference]: Without dead ends: 1659 [2018-04-13 00:10:11,944 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 273 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=485, Invalid=1407, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:10:11,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1659 states. [2018-04-13 00:10:11,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1659 to 554. [2018-04-13 00:10:11,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:11,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:11,977 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2311 [2018-04-13 00:10:11,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:11,977 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:11,977 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:11,978 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:11,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2318 [2018-04-13 00:10:11,997 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:11,997 INFO L355 BasicCegarLoop]: trace histogram [355, 327, 327, 327, 327, 327, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:11,997 INFO L408 AbstractCegarLoop]: === Iteration 167 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:11,998 INFO L82 PathProgramCache]: Analyzing trace with hash 730566057, now seen corresponding path program 156 times [2018-04-13 00:10:11,998 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:12,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:12,111 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:13,803 INFO L134 CoverageAnalysis]: Checked inductivity of 342710 backedges. 16039 proven. 15492 refuted. 0 times theorem prover too weak. 311179 trivial. 0 not checked. [2018-04-13 00:10:13,804 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:13,804 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:13,804 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:13,805 INFO L134 CoverageAnalysis]: Checked inductivity of 18636 backedges. 967 proven. 736 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:13,805 INFO L182 omatonBuilderFactory]: Interpolants [185666#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 185667#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 185664#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 185665#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 185670#(<= main_~i~1 16), 185671#(<= main_~i~1 17), 185668#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 185669#(<= main_~i~1 15), 185674#(<= main_~i~1 20), 185675#(<= main_~i~1 21), 185672#(<= main_~i~1 18), 185673#(<= main_~i~1 19), 185678#(<= main_~i~1 24), 185676#(<= main_~i~1 22), 185677#(<= main_~i~1 23), 185650#true, 185651#false, 185654#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 185655#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 185652#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 185653#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 185658#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 185659#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 185656#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 185657#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 185662#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 185663#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 185660#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 185661#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9))] [2018-04-13 00:10:13,810 INFO L134 CoverageAnalysis]: Checked inductivity of 342710 backedges. 16039 proven. 15492 refuted. 0 times theorem prover too weak. 311179 trivial. 0 not checked. [2018-04-13 00:10:13,811 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:13,811 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:13,811 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=220, Invalid=592, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:13,811 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:14,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:14,189 INFO L93 Difference]: Finished difference Result 1608 states and 4091 transitions. [2018-04-13 00:10:14,189 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:10:14,189 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2317 [2018-04-13 00:10:14,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:14,201 INFO L225 Difference]: With dead ends: 1608 [2018-04-13 00:10:14,202 INFO L226 Difference]: Without dead ends: 1608 [2018-04-13 00:10:14,202 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=524, Invalid=1456, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:10:14,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1608 states. [2018-04-13 00:10:14,233 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1608 to 554. [2018-04-13 00:10:14,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:14,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:14,236 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2317 [2018-04-13 00:10:14,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:14,237 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:14,237 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:14,237 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:14,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2324 [2018-04-13 00:10:14,257 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:14,258 INFO L355 BasicCegarLoop]: trace histogram [356, 328, 328, 328, 328, 328, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:14,258 INFO L408 AbstractCegarLoop]: === Iteration 168 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:14,258 INFO L82 PathProgramCache]: Analyzing trace with hash 303626417, now seen corresponding path program 157 times [2018-04-13 00:10:14,258 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:14,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:14,371 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:16,082 INFO L134 CoverageAnalysis]: Checked inductivity of 344728 backedges. 18546 proven. 14885 refuted. 0 times theorem prover too weak. 311297 trivial. 0 not checked. [2018-04-13 00:10:16,082 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:16,083 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:16,083 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:16,084 INFO L134 CoverageAnalysis]: Checked inductivity of 18684 backedges. 1065 proven. 686 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:16,084 INFO L182 omatonBuilderFactory]: Interpolants [187874#false, 187875#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 187873#true, 187878#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 187879#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 187876#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 187877#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 187882#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 187883#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 187880#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 187881#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 187886#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 187887#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 187884#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 187885#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 187890#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 187891#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 187888#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 187889#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 187894#(<= main_~i~1 17), 187895#(<= main_~i~1 18), 187892#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 187893#(<= main_~i~1 16), 187898#(<= main_~i~1 21), 187899#(<= main_~i~1 22), 187896#(<= main_~i~1 19), 187897#(<= main_~i~1 20), 187900#(<= main_~i~1 23), 187901#(<= main_~i~1 24)] [2018-04-13 00:10:16,089 INFO L134 CoverageAnalysis]: Checked inductivity of 344728 backedges. 18546 proven. 14885 refuted. 0 times theorem prover too weak. 311297 trivial. 0 not checked. [2018-04-13 00:10:16,090 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:16,090 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:16,090 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:16,090 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:16,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:16,535 INFO L93 Difference]: Finished difference Result 1545 states and 3908 transitions. [2018-04-13 00:10:16,535 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-04-13 00:10:16,535 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2323 [2018-04-13 00:10:16,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:16,546 INFO L225 Difference]: With dead ends: 1545 [2018-04-13 00:10:16,546 INFO L226 Difference]: Without dead ends: 1545 [2018-04-13 00:10:16,546 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=567, Invalid=1503, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:10:16,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1545 states. [2018-04-13 00:10:16,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1545 to 554. [2018-04-13 00:10:16,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:16,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:16,574 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2323 [2018-04-13 00:10:16,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:16,574 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:16,574 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:16,574 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:16,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2330 [2018-04-13 00:10:16,594 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:16,595 INFO L355 BasicCegarLoop]: trace histogram [357, 329, 329, 329, 329, 329, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:16,595 INFO L408 AbstractCegarLoop]: === Iteration 169 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:16,595 INFO L82 PathProgramCache]: Analyzing trace with hash -1643260679, now seen corresponding path program 158 times [2018-04-13 00:10:16,595 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:16,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:16,700 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:18,450 INFO L134 CoverageAnalysis]: Checked inductivity of 346752 backedges. 21341 proven. 13990 refuted. 0 times theorem prover too weak. 311421 trivial. 0 not checked. [2018-04-13 00:10:18,450 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:18,451 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:18,451 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:18,451 INFO L134 CoverageAnalysis]: Checked inductivity of 18726 backedges. 1169 proven. 624 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:18,452 INFO L182 omatonBuilderFactory]: Interpolants [190035#true, 190038#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 190039#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 190036#false, 190037#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 190042#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 190043#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 190040#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 190041#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 190046#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 190047#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 190044#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 190045#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 190050#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 190051#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 190048#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 190049#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 190054#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 190055#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 190052#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 190053#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 190058#(<= main_~i~1 19), 190059#(<= main_~i~1 20), 190056#(<= main_~i~1 17), 190057#(<= main_~i~1 18), 190062#(<= main_~i~1 23), 190063#(<= main_~i~1 24), 190060#(<= main_~i~1 21), 190061#(<= main_~i~1 22)] [2018-04-13 00:10:18,457 INFO L134 CoverageAnalysis]: Checked inductivity of 346752 backedges. 21341 proven. 13990 refuted. 0 times theorem prover too weak. 311421 trivial. 0 not checked. [2018-04-13 00:10:18,457 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:18,458 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:18,458 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=236, Invalid=576, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:18,458 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:18,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:18,887 INFO L93 Difference]: Finished difference Result 1470 states and 3687 transitions. [2018-04-13 00:10:18,887 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:10:18,888 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2329 [2018-04-13 00:10:18,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:18,896 INFO L225 Difference]: With dead ends: 1470 [2018-04-13 00:10:18,896 INFO L226 Difference]: Without dead ends: 1470 [2018-04-13 00:10:18,896 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 306 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=614, Invalid=1548, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:10:18,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1470 states. [2018-04-13 00:10:18,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1470 to 554. [2018-04-13 00:10:18,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:18,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:18,919 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2329 [2018-04-13 00:10:18,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:18,920 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:18,920 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:18,920 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:18,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2336 [2018-04-13 00:10:18,940 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:18,940 INFO L355 BasicCegarLoop]: trace histogram [358, 330, 330, 330, 330, 330, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:18,940 INFO L408 AbstractCegarLoop]: === Iteration 170 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:18,940 INFO L82 PathProgramCache]: Analyzing trace with hash 2088768129, now seen corresponding path program 159 times [2018-04-13 00:10:18,940 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:19,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:19,034 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:20,727 INFO L134 CoverageAnalysis]: Checked inductivity of 348782 backedges. 24442 proven. 12789 refuted. 0 times theorem prover too weak. 311551 trivial. 0 not checked. [2018-04-13 00:10:20,727 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:20,728 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:20,728 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:20,728 INFO L134 CoverageAnalysis]: Checked inductivity of 18762 backedges. 1279 proven. 550 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:20,729 INFO L182 omatonBuilderFactory]: Interpolants [192130#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 192131#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 192128#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 192129#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 192134#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 192135#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 192132#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 192133#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 192138#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 192139#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 192136#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 192137#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 192142#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 192143#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 192140#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 192141#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 192146#(<= main_~i~1 18), 192147#(<= main_~i~1 19), 192144#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 192145#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 192150#(<= main_~i~1 22), 192151#(<= main_~i~1 23), 192148#(<= main_~i~1 20), 192149#(<= main_~i~1 21), 192152#(<= main_~i~1 24), 192126#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 192127#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 192124#true, 192125#false] [2018-04-13 00:10:20,735 INFO L134 CoverageAnalysis]: Checked inductivity of 348782 backedges. 24442 proven. 12789 refuted. 0 times theorem prover too weak. 311551 trivial. 0 not checked. [2018-04-13 00:10:20,735 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:20,735 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:20,735 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=247, Invalid=565, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:20,735 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:21,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:21,201 INFO L93 Difference]: Finished difference Result 1383 states and 3427 transitions. [2018-04-13 00:10:21,201 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:10:21,201 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2335 [2018-04-13 00:10:21,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:21,211 INFO L225 Difference]: With dead ends: 1383 [2018-04-13 00:10:21,211 INFO L226 Difference]: Without dead ends: 1383 [2018-04-13 00:10:21,211 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 315 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=665, Invalid=1591, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:10:21,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1383 states. [2018-04-13 00:10:21,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1383 to 554. [2018-04-13 00:10:21,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:21,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:21,236 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2335 [2018-04-13 00:10:21,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:21,237 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:21,237 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:21,237 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:21,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2342 [2018-04-13 00:10:21,259 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:21,259 INFO L355 BasicCegarLoop]: trace histogram [359, 331, 331, 331, 331, 331, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:21,259 INFO L408 AbstractCegarLoop]: === Iteration 171 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:21,259 INFO L82 PathProgramCache]: Analyzing trace with hash -143388343, now seen corresponding path program 160 times [2018-04-13 00:10:21,260 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:21,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:21,371 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:23,140 INFO L134 CoverageAnalysis]: Checked inductivity of 350818 backedges. 27867 proven. 11264 refuted. 0 times theorem prover too weak. 311687 trivial. 0 not checked. [2018-04-13 00:10:23,140 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:23,178 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:23,178 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:23,179 INFO L134 CoverageAnalysis]: Checked inductivity of 18792 backedges. 1395 proven. 464 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:23,179 INFO L182 omatonBuilderFactory]: Interpolants [194130#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 194131#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 194128#true, 194129#false, 194134#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 194135#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 194132#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 194133#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 194138#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 194139#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 194136#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 194137#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 194142#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 194143#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 194140#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 194141#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 194146#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 194147#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 194144#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 194145#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 194150#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 194151#(<= main_~i~1 19), 194148#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 194149#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 194154#(<= main_~i~1 22), 194155#(<= main_~i~1 23), 194152#(<= main_~i~1 20), 194153#(<= main_~i~1 21), 194156#(<= main_~i~1 24)] [2018-04-13 00:10:23,185 INFO L134 CoverageAnalysis]: Checked inductivity of 350818 backedges. 27867 proven. 11264 refuted. 0 times theorem prover too weak. 311687 trivial. 0 not checked. [2018-04-13 00:10:23,185 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:23,185 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:23,185 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=260, Invalid=552, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:23,185 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:23,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:23,649 INFO L93 Difference]: Finished difference Result 1284 states and 3127 transitions. [2018-04-13 00:10:23,649 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-04-13 00:10:23,649 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2341 [2018-04-13 00:10:23,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:23,659 INFO L225 Difference]: With dead ends: 1284 [2018-04-13 00:10:23,659 INFO L226 Difference]: Without dead ends: 1284 [2018-04-13 00:10:23,659 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 323 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=720, Invalid=1632, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:10:23,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1284 states. [2018-04-13 00:10:23,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1284 to 554. [2018-04-13 00:10:23,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:23,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:23,684 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2341 [2018-04-13 00:10:23,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:23,684 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:23,684 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:23,684 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:23,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2348 [2018-04-13 00:10:23,706 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:23,706 INFO L355 BasicCegarLoop]: trace histogram [360, 332, 332, 332, 332, 332, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:23,706 INFO L408 AbstractCegarLoop]: === Iteration 172 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:23,706 INFO L82 PathProgramCache]: Analyzing trace with hash 909943121, now seen corresponding path program 161 times [2018-04-13 00:10:23,707 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:23,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:23,836 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:25,603 INFO L134 CoverageAnalysis]: Checked inductivity of 352860 backedges. 31634 proven. 9397 refuted. 0 times theorem prover too weak. 311829 trivial. 0 not checked. [2018-04-13 00:10:25,604 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:25,604 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:25,604 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:25,605 INFO L134 CoverageAnalysis]: Checked inductivity of 18816 backedges. 1517 proven. 366 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:25,605 INFO L182 omatonBuilderFactory]: Interpolants [196035#true, 196038#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 196039#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 196036#false, 196037#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 196042#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 196043#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 196040#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 196041#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 196046#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 196047#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 196044#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 196045#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 196050#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 196051#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 196048#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 196049#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 196054#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 196055#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 196052#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 196053#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 196058#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 196059#(<= main_~i~1 20), 196056#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 196057#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 196062#(<= main_~i~1 23), 196063#(<= main_~i~1 24), 196060#(<= main_~i~1 21), 196061#(<= main_~i~1 22)] [2018-04-13 00:10:25,611 INFO L134 CoverageAnalysis]: Checked inductivity of 352860 backedges. 31634 proven. 9397 refuted. 0 times theorem prover too weak. 311829 trivial. 0 not checked. [2018-04-13 00:10:25,611 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:25,611 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:25,611 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=537, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:25,611 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:26,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:26,034 INFO L93 Difference]: Finished difference Result 1173 states and 2786 transitions. [2018-04-13 00:10:26,034 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2018-04-13 00:10:26,034 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2347 [2018-04-13 00:10:26,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:26,042 INFO L225 Difference]: With dead ends: 1173 [2018-04-13 00:10:26,042 INFO L226 Difference]: Without dead ends: 1173 [2018-04-13 00:10:26,042 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=779, Invalid=1671, Unknown=0, NotChecked=0, Total=2450 [2018-04-13 00:10:26,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1173 states. [2018-04-13 00:10:26,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1173 to 554. [2018-04-13 00:10:26,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:26,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:26,062 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2347 [2018-04-13 00:10:26,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:26,063 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:26,063 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:26,063 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:26,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2354 [2018-04-13 00:10:26,083 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:26,083 INFO L355 BasicCegarLoop]: trace histogram [361, 333, 333, 333, 333, 333, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:26,083 INFO L408 AbstractCegarLoop]: === Iteration 173 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:26,083 INFO L82 PathProgramCache]: Analyzing trace with hash 160891545, now seen corresponding path program 162 times [2018-04-13 00:10:26,084 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:26,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:26,192 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:27,876 INFO L134 CoverageAnalysis]: Checked inductivity of 354908 backedges. 35761 proven. 7170 refuted. 0 times theorem prover too weak. 311977 trivial. 0 not checked. [2018-04-13 00:10:27,876 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:27,876 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:27,877 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:27,877 INFO L134 CoverageAnalysis]: Checked inductivity of 18834 backedges. 1645 proven. 256 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:27,877 INFO L182 omatonBuilderFactory]: Interpolants [197835#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 197834#false, 197833#true, 197839#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 197838#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 197837#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 197836#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 197843#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 197842#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 197841#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 197840#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 197847#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 197846#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 197845#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 197844#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 197851#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 197850#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 197849#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 197848#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 197855#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 197854#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 197853#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 197852#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 197859#(<= main_~i~1 22), 197858#(<= main_~i~1 21), 197857#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21), 197856#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 197861#(<= main_~i~1 24), 197860#(<= main_~i~1 23)] [2018-04-13 00:10:27,884 INFO L134 CoverageAnalysis]: Checked inductivity of 354908 backedges. 35761 proven. 7170 refuted. 0 times theorem prover too weak. 311977 trivial. 0 not checked. [2018-04-13 00:10:27,884 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:27,884 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:27,884 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=292, Invalid=520, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:27,884 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:28,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:28,330 INFO L93 Difference]: Finished difference Result 1050 states and 2403 transitions. [2018-04-13 00:10:28,361 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2018-04-13 00:10:28,361 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2353 [2018-04-13 00:10:28,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:28,367 INFO L225 Difference]: With dead ends: 1050 [2018-04-13 00:10:28,367 INFO L226 Difference]: Without dead ends: 1050 [2018-04-13 00:10:28,368 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 336 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=842, Invalid=1708, Unknown=0, NotChecked=0, Total=2550 [2018-04-13 00:10:28,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1050 states. [2018-04-13 00:10:28,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1050 to 554. [2018-04-13 00:10:28,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:28,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:28,385 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2353 [2018-04-13 00:10:28,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:28,385 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:28,385 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:28,385 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:28,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2360 [2018-04-13 00:10:28,406 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:28,406 INFO L355 BasicCegarLoop]: trace histogram [362, 334, 334, 334, 334, 334, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:28,406 INFO L408 AbstractCegarLoop]: === Iteration 174 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:28,406 INFO L82 PathProgramCache]: Analyzing trace with hash -628955871, now seen corresponding path program 163 times [2018-04-13 00:10:28,407 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:28,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:28,513 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:30,371 INFO L134 CoverageAnalysis]: Checked inductivity of 356962 backedges. 40266 proven. 4565 refuted. 0 times theorem prover too weak. 312131 trivial. 0 not checked. [2018-04-13 00:10:30,371 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:30,371 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:30,371 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:30,372 INFO L134 CoverageAnalysis]: Checked inductivity of 18846 backedges. 1779 proven. 134 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:30,372 INFO L182 omatonBuilderFactory]: Interpolants [199511#false, 199510#true, 199515#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 199514#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 199513#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 199512#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 199519#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 199518#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 199517#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 199516#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 199523#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 199522#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 199521#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 199520#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 199527#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 199526#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 199525#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 199524#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 199531#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 199530#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 199529#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 199528#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 199535#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 22), 199534#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 199533#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 199532#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 199538#(<= main_~i~1 24), 199537#(<= main_~i~1 23), 199536#(<= main_~i~1 22)] [2018-04-13 00:10:30,378 INFO L134 CoverageAnalysis]: Checked inductivity of 356962 backedges. 40266 proven. 4565 refuted. 0 times theorem prover too weak. 312131 trivial. 0 not checked. [2018-04-13 00:10:30,378 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:30,379 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:30,379 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=311, Invalid=501, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:30,379 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:30,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:30,799 INFO L93 Difference]: Finished difference Result 919 states and 1981 transitions. [2018-04-13 00:10:30,799 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2018-04-13 00:10:30,799 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2359 [2018-04-13 00:10:30,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:30,805 INFO L225 Difference]: With dead ends: 919 [2018-04-13 00:10:30,805 INFO L226 Difference]: Without dead ends: 919 [2018-04-13 00:10:30,805 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 341 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=909, Invalid=1743, Unknown=0, NotChecked=0, Total=2652 [2018-04-13 00:10:30,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 919 states. [2018-04-13 00:10:30,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 919 to 554. [2018-04-13 00:10:30,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 554 states. [2018-04-13 00:10:30,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 554 states to 554 states and 950 transitions. [2018-04-13 00:10:30,819 INFO L78 Accepts]: Start accepts. Automaton has 554 states and 950 transitions. Word has length 2359 [2018-04-13 00:10:30,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:30,820 INFO L459 AbstractCegarLoop]: Abstraction has 554 states and 950 transitions. [2018-04-13 00:10:30,820 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:30,820 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 950 transitions. [2018-04-13 00:10:30,841 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2366 [2018-04-13 00:10:30,841 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:30,841 INFO L355 BasicCegarLoop]: trace histogram [363, 335, 335, 335, 335, 335, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:30,841 INFO L408 AbstractCegarLoop]: === Iteration 175 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:30,841 INFO L82 PathProgramCache]: Analyzing trace with hash 64383209, now seen corresponding path program 164 times [2018-04-13 00:10:30,842 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:30,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:30,951 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:32,766 INFO L134 CoverageAnalysis]: Checked inductivity of 359022 backedges. 45167 proven. 1564 refuted. 0 times theorem prover too weak. 312291 trivial. 0 not checked. [2018-04-13 00:10:32,766 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:32,767 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2018-04-13 00:10:32,767 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:32,767 INFO L134 CoverageAnalysis]: Checked inductivity of 18852 backedges. 1919 proven. 0 refuted. 0 times theorem prover too weak. 16933 trivial. 0 not checked. [2018-04-13 00:10:32,768 INFO L182 omatonBuilderFactory]: Interpolants [201059#false, 201058#true, 201063#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 201062#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 201061#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 201060#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 201067#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 201066#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 201065#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 201064#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 201071#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 201070#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 201069#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 201068#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 201075#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 201074#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 201073#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 201072#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 201079#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 201078#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 201077#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 201076#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 201083#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 201082#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 201081#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 201080#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 201086#(<= main_~i~1 24), 201085#(<= main_~i~1 23), 201084#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 23)] [2018-04-13 00:10:32,774 INFO L134 CoverageAnalysis]: Checked inductivity of 359022 backedges. 45167 proven. 1564 refuted. 0 times theorem prover too weak. 312291 trivial. 0 not checked. [2018-04-13 00:10:32,774 INFO L442 AbstractCegarLoop]: Interpolant automaton has 29 states [2018-04-13 00:10:32,774 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2018-04-13 00:10:32,774 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=332, Invalid=480, Unknown=0, NotChecked=0, Total=812 [2018-04-13 00:10:32,774 INFO L87 Difference]: Start difference. First operand 554 states and 950 transitions. Second operand 29 states. [2018-04-13 00:10:33,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:33,164 INFO L93 Difference]: Finished difference Result 781 states and 1571 transitions. [2018-04-13 00:10:33,164 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2018-04-13 00:10:33,164 INFO L78 Accepts]: Start accepts. Automaton has 29 states. Word has length 2365 [2018-04-13 00:10:33,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:33,169 INFO L225 Difference]: With dead ends: 781 [2018-04-13 00:10:33,169 INFO L226 Difference]: Without dead ends: 781 [2018-04-13 00:10:33,169 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 345 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=980, Invalid=1776, Unknown=0, NotChecked=0, Total=2756 [2018-04-13 00:10:33,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 781 states. [2018-04-13 00:10:33,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 781 to 563. [2018-04-13 00:10:33,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 563 states. [2018-04-13 00:10:33,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 563 states to 563 states and 985 transitions. [2018-04-13 00:10:33,182 INFO L78 Accepts]: Start accepts. Automaton has 563 states and 985 transitions. Word has length 2365 [2018-04-13 00:10:33,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:33,183 INFO L459 AbstractCegarLoop]: Abstraction has 563 states and 985 transitions. [2018-04-13 00:10:33,183 INFO L460 AbstractCegarLoop]: Interpolant automaton has 29 states. [2018-04-13 00:10:33,183 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 985 transitions. [2018-04-13 00:10:33,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2372 [2018-04-13 00:10:33,204 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:33,205 INFO L355 BasicCegarLoop]: trace histogram [364, 336, 336, 336, 336, 336, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:33,205 INFO L408 AbstractCegarLoop]: === Iteration 176 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:33,205 INFO L82 PathProgramCache]: Analyzing trace with hash 260972017, now seen corresponding path program 165 times [2018-04-13 00:10:33,205 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:33,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:33,310 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:34,982 INFO L134 CoverageAnalysis]: Checked inductivity of 361088 backedges. 7871 proven. 19030 refuted. 0 times theorem prover too weak. 334187 trivial. 0 not checked. [2018-04-13 00:10:34,982 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:34,982 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:34,983 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:34,983 INFO L134 CoverageAnalysis]: Checked inductivity of 18849 backedges. 487 proven. 1042 refuted. 0 times theorem prover too weak. 17320 trivial. 0 not checked. [2018-04-13 00:10:34,983 INFO L182 omatonBuilderFactory]: Interpolants [202499#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 202498#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 202497#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 202496#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 202503#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 202502#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 202501#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 202500#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 202507#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 202506#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 202505#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 202504#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 202508#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 12), 202479#true, 202483#(<= 2 main_~i~1), 202482#(<= 1 main_~i~1), 202481#(<= 0 main_~i~1), 202480#false, 202487#(<= 6 main_~i~1), 202486#(<= 5 main_~i~1), 202485#(<= 4 main_~i~1), 202484#(<= 3 main_~i~1), 202491#(<= 10 main_~i~1), 202490#(<= 9 main_~i~1), 202489#(<= 8 main_~i~1), 202488#(<= 7 main_~i~1), 202495#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 202494#(<= 13 main_~i~1), 202493#(<= 12 main_~i~1), 202492#(<= 11 main_~i~1)] [2018-04-13 00:10:34,989 INFO L134 CoverageAnalysis]: Checked inductivity of 361088 backedges. 7871 proven. 19030 refuted. 0 times theorem prover too weak. 334187 trivial. 0 not checked. [2018-04-13 00:10:34,989 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:34,989 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:34,989 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=644, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:34,989 INFO L87 Difference]: Start difference. First operand 563 states and 985 transitions. Second operand 30 states. [2018-04-13 00:10:35,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:35,436 INFO L93 Difference]: Finished difference Result 628 states and 1022 transitions. [2018-04-13 00:10:35,436 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2018-04-13 00:10:35,436 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2371 [2018-04-13 00:10:35,436 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:35,438 INFO L225 Difference]: With dead ends: 628 [2018-04-13 00:10:35,438 INFO L226 Difference]: Without dead ends: 628 [2018-04-13 00:10:35,438 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 441 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=434, Invalid=1372, Unknown=0, NotChecked=0, Total=1806 [2018-04-13 00:10:35,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 628 states. [2018-04-13 00:10:35,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 628 to 563. [2018-04-13 00:10:35,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 563 states. [2018-04-13 00:10:35,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 563 states to 563 states and 970 transitions. [2018-04-13 00:10:35,445 INFO L78 Accepts]: Start accepts. Automaton has 563 states and 970 transitions. Word has length 2371 [2018-04-13 00:10:35,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:35,445 INFO L459 AbstractCegarLoop]: Abstraction has 563 states and 970 transitions. [2018-04-13 00:10:35,446 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:35,446 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 970 transitions. [2018-04-13 00:10:35,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2390 [2018-04-13 00:10:35,467 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:35,467 INFO L355 BasicCegarLoop]: trace histogram [367, 339, 339, 339, 339, 339, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:35,467 INFO L408 AbstractCegarLoop]: === Iteration 177 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:35,467 INFO L82 PathProgramCache]: Analyzing trace with hash -956629431, now seen corresponding path program 166 times [2018-04-13 00:10:35,467 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:35,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:35,574 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:37,262 INFO L134 CoverageAnalysis]: Checked inductivity of 367322 backedges. 0 proven. 2324 refuted. 0 times theorem prover too weak. 364998 trivial. 0 not checked. [2018-04-13 00:10:37,262 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:37,262 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:10:37,262 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:37,263 INFO L134 CoverageAnalysis]: Checked inductivity of 19083 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 19083 trivial. 0 not checked. [2018-04-13 00:10:37,263 INFO L182 omatonBuilderFactory]: Interpolants [203727#false, 203726#true, 203731#(<= main_~i~1 3), 203730#(<= main_~i~1 2), 203729#(<= main_~i~1 1), 203728#(= main_~i~1 0), 203735#(<= main_~i~1 7), 203734#(<= main_~i~1 6), 203733#(<= main_~i~1 5), 203732#(<= main_~i~1 4), 203739#(<= main_~i~1 11), 203738#(<= main_~i~1 10), 203737#(<= main_~i~1 9), 203736#(<= main_~i~1 8), 203743#(<= main_~i~1 15), 203742#(<= main_~i~1 14), 203741#(<= main_~i~1 13), 203740#(<= main_~i~1 12), 203747#(<= main_~i~1 19), 203746#(<= main_~i~1 18), 203745#(<= main_~i~1 17), 203744#(<= main_~i~1 16), 203751#(<= main_~i~1 23), 203750#(<= main_~i~1 22), 203749#(<= main_~i~1 21), 203748#(<= main_~i~1 20), 203755#(<= main_~i~1 27), 203754#(<= main_~i~1 26), 203753#(<= main_~i~1 25), 203752#(<= main_~i~1 24), 203756#(<= main_~i~1 28)] [2018-04-13 00:10:37,268 INFO L134 CoverageAnalysis]: Checked inductivity of 367322 backedges. 0 proven. 2324 refuted. 0 times theorem prover too weak. 364998 trivial. 0 not checked. [2018-04-13 00:10:37,269 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:10:37,269 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:10:37,269 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=465, Invalid=465, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:10:37,269 INFO L87 Difference]: Start difference. First operand 563 states and 970 transitions. Second operand 31 states. [2018-04-13 00:10:37,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:37,506 INFO L93 Difference]: Finished difference Result 1206 states and 2510 transitions. [2018-04-13 00:10:37,506 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2018-04-13 00:10:37,506 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2389 [2018-04-13 00:10:37,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:37,513 INFO L225 Difference]: With dead ends: 1206 [2018-04-13 00:10:37,513 INFO L226 Difference]: Without dead ends: 1206 [2018-04-13 00:10:37,513 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=465, Invalid=465, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:10:37,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1206 states. [2018-04-13 00:10:37,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1206 to 574. [2018-04-13 00:10:37,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:37,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:37,531 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2389 [2018-04-13 00:10:37,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:37,532 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:37,532 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:10:37,532 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:37,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2480 [2018-04-13 00:10:37,554 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:37,554 INFO L355 BasicCegarLoop]: trace histogram [381, 352, 352, 352, 352, 352, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:37,554 INFO L408 AbstractCegarLoop]: === Iteration 178 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:37,554 INFO L82 PathProgramCache]: Analyzing trace with hash -97816014, now seen corresponding path program 167 times [2018-04-13 00:10:37,555 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:37,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:37,667 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:39,570 INFO L134 CoverageAnalysis]: Checked inductivity of 396002 backedges. 12163 proven. 17929 refuted. 0 times theorem prover too weak. 365910 trivial. 0 not checked. [2018-04-13 00:10:39,570 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:39,570 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:39,570 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:39,571 INFO L134 CoverageAnalysis]: Checked inductivity of 20805 backedges. 816 proven. 880 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:39,571 INFO L182 omatonBuilderFactory]: Interpolants [205539#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 205538#false, 205537#true, 205543#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 205542#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 205541#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 205540#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 205547#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 205546#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 205545#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 205544#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 205551#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 205550#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 205549#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 205548#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 205555#(<= main_~i~1 14), 205554#(<= main_~i~1 13), 205553#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 205552#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 205559#(<= main_~i~1 18), 205558#(<= main_~i~1 17), 205557#(<= main_~i~1 16), 205556#(<= main_~i~1 15), 205563#(<= main_~i~1 22), 205562#(<= main_~i~1 21), 205561#(<= main_~i~1 20), 205560#(<= main_~i~1 19), 205566#(<= main_~i~1 25), 205565#(<= main_~i~1 24), 205564#(<= main_~i~1 23)] [2018-04-13 00:10:39,578 INFO L134 CoverageAnalysis]: Checked inductivity of 396002 backedges. 12163 proven. 17929 refuted. 0 times theorem prover too weak. 365910 trivial. 0 not checked. [2018-04-13 00:10:39,578 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:39,578 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:39,578 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=644, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:39,578 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:39,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:39,973 INFO L93 Difference]: Finished difference Result 1819 states and 4738 transitions. [2018-04-13 00:10:39,973 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2018-04-13 00:10:39,973 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2479 [2018-04-13 00:10:39,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:39,986 INFO L225 Difference]: With dead ends: 1819 [2018-04-13 00:10:39,986 INFO L226 Difference]: Without dead ends: 1819 [2018-04-13 00:10:39,987 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 273 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=464, Invalid=1428, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:10:39,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1819 states. [2018-04-13 00:10:40,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1819 to 574. [2018-04-13 00:10:40,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:40,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:40,023 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2479 [2018-04-13 00:10:40,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:40,024 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:40,024 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:40,024 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:40,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2486 [2018-04-13 00:10:40,047 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:40,047 INFO L355 BasicCegarLoop]: trace histogram [382, 353, 353, 353, 353, 353, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:40,047 INFO L408 AbstractCegarLoop]: === Iteration 179 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:40,047 INFO L82 PathProgramCache]: Analyzing trace with hash -706097990, now seen corresponding path program 168 times [2018-04-13 00:10:40,048 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:40,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:40,163 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:41,995 INFO L134 CoverageAnalysis]: Checked inductivity of 398172 backedges. 14172 proven. 17984 refuted. 0 times theorem prover too weak. 366016 trivial. 0 not checked. [2018-04-13 00:10:41,995 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:41,995 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:41,995 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:41,996 INFO L134 CoverageAnalysis]: Checked inductivity of 20862 backedges. 893 proven. 860 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:41,996 INFO L182 omatonBuilderFactory]: Interpolants [208003#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 208002#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 208001#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 208000#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 208007#(<= main_~i~1 15), 208006#(<= main_~i~1 14), 208005#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 208004#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 208011#(<= main_~i~1 19), 208010#(<= main_~i~1 18), 208009#(<= main_~i~1 17), 208008#(<= main_~i~1 16), 208015#(<= main_~i~1 23), 208014#(<= main_~i~1 22), 208013#(<= main_~i~1 21), 208012#(<= main_~i~1 20), 208017#(<= main_~i~1 25), 208016#(<= main_~i~1 24), 207991#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 207990#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 207989#false, 207988#true, 207995#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 207994#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 207993#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 207992#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 207999#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 207998#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 207997#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 207996#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6))] [2018-04-13 00:10:42,002 INFO L134 CoverageAnalysis]: Checked inductivity of 398172 backedges. 14172 proven. 17984 refuted. 0 times theorem prover too weak. 366016 trivial. 0 not checked. [2018-04-13 00:10:42,003 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:42,003 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:42,003 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=228, Invalid=642, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:42,003 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:42,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:42,371 INFO L93 Difference]: Finished difference Result 1786 states and 4646 transitions. [2018-04-13 00:10:42,371 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:10:42,371 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2485 [2018-04-13 00:10:42,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:42,383 INFO L225 Difference]: With dead ends: 1786 [2018-04-13 00:10:42,384 INFO L226 Difference]: Without dead ends: 1786 [2018-04-13 00:10:42,384 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=498, Invalid=1482, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:10:42,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1786 states. [2018-04-13 00:10:42,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1786 to 574. [2018-04-13 00:10:42,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:42,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:42,419 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2485 [2018-04-13 00:10:42,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:42,420 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:42,420 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:42,420 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:42,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2492 [2018-04-13 00:10:42,442 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:42,442 INFO L355 BasicCegarLoop]: trace histogram [383, 354, 354, 354, 354, 354, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:42,443 INFO L408 AbstractCegarLoop]: === Iteration 180 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:42,443 INFO L82 PathProgramCache]: Analyzing trace with hash -415881086, now seen corresponding path program 169 times [2018-04-13 00:10:42,443 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:42,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:42,576 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:44,502 INFO L134 CoverageAnalysis]: Checked inductivity of 400348 backedges. 16433 proven. 17787 refuted. 0 times theorem prover too weak. 366128 trivial. 0 not checked. [2018-04-13 00:10:44,502 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:44,503 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:44,503 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:44,504 INFO L134 CoverageAnalysis]: Checked inductivity of 20922 backedges. 985 proven. 828 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:44,504 INFO L182 omatonBuilderFactory]: Interpolants [210435#(<= main_~i~1 23), 210434#(<= main_~i~1 22), 210433#(<= main_~i~1 21), 210432#(<= main_~i~1 20), 210437#(<= main_~i~1 25), 210436#(<= main_~i~1 24), 210411#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 210410#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 210409#false, 210408#true, 210415#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 210414#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 210413#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 210412#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 210419#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 210418#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 210417#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 210416#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 210423#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 210422#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 210421#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 210420#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 210427#(<= main_~i~1 15), 210426#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 210425#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 210424#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 210431#(<= main_~i~1 19), 210430#(<= main_~i~1 18), 210429#(<= main_~i~1 17), 210428#(<= main_~i~1 16)] [2018-04-13 00:10:44,510 INFO L134 CoverageAnalysis]: Checked inductivity of 400348 backedges. 16433 proven. 17787 refuted. 0 times theorem prover too weak. 366128 trivial. 0 not checked. [2018-04-13 00:10:44,510 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:44,511 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:44,511 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=232, Invalid=638, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:44,511 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:45,005 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:45,006 INFO L93 Difference]: Finished difference Result 1741 states and 4518 transitions. [2018-04-13 00:10:45,006 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-04-13 00:10:45,006 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2491 [2018-04-13 00:10:45,007 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:45,020 INFO L225 Difference]: With dead ends: 1741 [2018-04-13 00:10:45,020 INFO L226 Difference]: Without dead ends: 1741 [2018-04-13 00:10:45,021 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 300 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=536, Invalid=1534, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:10:45,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1741 states. [2018-04-13 00:10:45,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1741 to 574. [2018-04-13 00:10:45,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:45,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:45,058 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2491 [2018-04-13 00:10:45,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:45,059 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:45,059 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:45,059 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:45,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2498 [2018-04-13 00:10:45,082 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:45,082 INFO L355 BasicCegarLoop]: trace histogram [384, 355, 355, 355, 355, 355, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:45,082 INFO L408 AbstractCegarLoop]: === Iteration 181 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:45,083 INFO L82 PathProgramCache]: Analyzing trace with hash -2027842166, now seen corresponding path program 170 times [2018-04-13 00:10:45,083 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:45,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:45,205 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:47,212 INFO L134 CoverageAnalysis]: Checked inductivity of 402530 backedges. 18964 proven. 17320 refuted. 0 times theorem prover too weak. 366246 trivial. 0 not checked. [2018-04-13 00:10:47,212 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:47,212 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:47,212 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:47,213 INFO L134 CoverageAnalysis]: Checked inductivity of 20976 backedges. 1083 proven. 784 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:47,213 INFO L182 omatonBuilderFactory]: Interpolants [212803#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 212802#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 212801#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 212800#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 212807#(<= main_~i~1 18), 212806#(<= main_~i~1 17), 212805#(<= main_~i~1 16), 212804#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 212811#(<= main_~i~1 22), 212810#(<= main_~i~1 21), 212809#(<= main_~i~1 20), 212808#(<= main_~i~1 19), 212814#(<= main_~i~1 25), 212813#(<= main_~i~1 24), 212812#(<= main_~i~1 23), 212787#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 212786#false, 212785#true, 212791#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 212790#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 212789#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 212788#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 212795#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 212794#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 212793#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 212792#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 212799#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 212798#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 212797#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 212796#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9))] [2018-04-13 00:10:47,220 INFO L134 CoverageAnalysis]: Checked inductivity of 402530 backedges. 18964 proven. 17320 refuted. 0 times theorem prover too weak. 366246 trivial. 0 not checked. [2018-04-13 00:10:47,220 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:47,220 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:47,221 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=632, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:47,221 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:47,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:47,645 INFO L93 Difference]: Finished difference Result 1684 states and 4353 transitions. [2018-04-13 00:10:47,645 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:10:47,645 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2497 [2018-04-13 00:10:47,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:47,658 INFO L225 Difference]: With dead ends: 1684 [2018-04-13 00:10:47,658 INFO L226 Difference]: Without dead ends: 1684 [2018-04-13 00:10:47,659 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 312 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=578, Invalid=1584, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:10:47,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1684 states. [2018-04-13 00:10:47,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1684 to 574. [2018-04-13 00:10:47,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:47,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:47,691 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2497 [2018-04-13 00:10:47,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:47,691 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:47,691 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:47,691 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:47,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2504 [2018-04-13 00:10:47,716 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:47,716 INFO L355 BasicCegarLoop]: trace histogram [385, 356, 356, 356, 356, 356, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:47,716 INFO L408 AbstractCegarLoop]: === Iteration 182 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:47,716 INFO L82 PathProgramCache]: Analyzing trace with hash -719875118, now seen corresponding path program 171 times [2018-04-13 00:10:47,717 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:47,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:47,842 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:50,064 INFO L134 CoverageAnalysis]: Checked inductivity of 404718 backedges. 21783 proven. 16565 refuted. 0 times theorem prover too weak. 366370 trivial. 0 not checked. [2018-04-13 00:10:50,065 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:50,065 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:50,065 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:50,066 INFO L134 CoverageAnalysis]: Checked inductivity of 21024 backedges. 1187 proven. 728 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:50,066 INFO L182 omatonBuilderFactory]: Interpolants [215107#true, 215111#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 215110#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 215109#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 215108#false, 215115#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 215114#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 215113#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 215112#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 215119#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 215118#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 215117#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 215116#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 215123#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 215122#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 215121#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 215120#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 215127#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 215126#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 215125#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 215124#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 215131#(<= main_~i~1 20), 215130#(<= main_~i~1 19), 215129#(<= main_~i~1 18), 215128#(<= main_~i~1 17), 215135#(<= main_~i~1 24), 215134#(<= main_~i~1 23), 215133#(<= main_~i~1 22), 215132#(<= main_~i~1 21), 215136#(<= main_~i~1 25)] [2018-04-13 00:10:50,072 INFO L134 CoverageAnalysis]: Checked inductivity of 404718 backedges. 21783 proven. 16565 refuted. 0 times theorem prover too weak. 366370 trivial. 0 not checked. [2018-04-13 00:10:50,072 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:50,072 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:50,073 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=246, Invalid=624, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:50,073 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:50,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:50,491 INFO L93 Difference]: Finished difference Result 1615 states and 4150 transitions. [2018-04-13 00:10:50,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:10:50,492 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2503 [2018-04-13 00:10:50,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:50,503 INFO L225 Difference]: With dead ends: 1615 [2018-04-13 00:10:50,503 INFO L226 Difference]: Without dead ends: 1615 [2018-04-13 00:10:50,503 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 323 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=624, Invalid=1632, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:10:50,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1615 states. [2018-04-13 00:10:50,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1615 to 574. [2018-04-13 00:10:50,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:50,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:50,532 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2503 [2018-04-13 00:10:50,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:50,533 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:50,533 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:50,533 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:50,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2510 [2018-04-13 00:10:50,555 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:50,555 INFO L355 BasicCegarLoop]: trace histogram [386, 357, 357, 357, 357, 357, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:50,555 INFO L408 AbstractCegarLoop]: === Iteration 183 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:50,556 INFO L82 PathProgramCache]: Analyzing trace with hash -188345510, now seen corresponding path program 172 times [2018-04-13 00:10:50,556 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:50,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:50,665 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:52,860 INFO L134 CoverageAnalysis]: Checked inductivity of 406912 backedges. 24908 proven. 15504 refuted. 0 times theorem prover too weak. 366500 trivial. 0 not checked. [2018-04-13 00:10:52,860 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:52,860 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:52,860 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:52,861 INFO L134 CoverageAnalysis]: Checked inductivity of 21066 backedges. 1297 proven. 660 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:52,861 INFO L182 omatonBuilderFactory]: Interpolants [217363#false, 217362#true, 217367#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 217366#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 217365#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 217364#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 217371#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 217370#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 217369#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 217368#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 217375#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 217374#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 217373#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 217372#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 217379#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 217378#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 217377#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 217376#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 217383#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 217382#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 217381#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 217380#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 217387#(<= main_~i~1 21), 217386#(<= main_~i~1 20), 217385#(<= main_~i~1 19), 217384#(<= main_~i~1 18), 217391#(<= main_~i~1 25), 217390#(<= main_~i~1 24), 217389#(<= main_~i~1 23), 217388#(<= main_~i~1 22)] [2018-04-13 00:10:52,868 INFO L134 CoverageAnalysis]: Checked inductivity of 406912 backedges. 24908 proven. 15504 refuted. 0 times theorem prover too weak. 366500 trivial. 0 not checked. [2018-04-13 00:10:52,868 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:52,868 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:52,868 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=256, Invalid=614, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:52,868 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:53,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:53,341 INFO L93 Difference]: Finished difference Result 1534 states and 3908 transitions. [2018-04-13 00:10:53,341 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-04-13 00:10:53,341 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2509 [2018-04-13 00:10:53,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:53,353 INFO L225 Difference]: With dead ends: 1534 [2018-04-13 00:10:53,354 INFO L226 Difference]: Without dead ends: 1534 [2018-04-13 00:10:53,354 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 333 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=674, Invalid=1678, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:10:53,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1534 states. [2018-04-13 00:10:53,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1534 to 574. [2018-04-13 00:10:53,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:53,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:53,385 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2509 [2018-04-13 00:10:53,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:53,385 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:53,385 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:53,386 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:53,410 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2516 [2018-04-13 00:10:53,410 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:53,410 INFO L355 BasicCegarLoop]: trace histogram [387, 358, 358, 358, 358, 358, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:53,410 INFO L408 AbstractCegarLoop]: === Iteration 184 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:53,410 INFO L82 PathProgramCache]: Analyzing trace with hash 180450338, now seen corresponding path program 173 times [2018-04-13 00:10:53,410 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:53,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:53,529 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:55,557 INFO L134 CoverageAnalysis]: Checked inductivity of 409112 backedges. 28357 proven. 14119 refuted. 0 times theorem prover too weak. 366636 trivial. 0 not checked. [2018-04-13 00:10:55,558 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:55,558 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:55,558 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:55,559 INFO L134 CoverageAnalysis]: Checked inductivity of 21102 backedges. 1413 proven. 580 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:55,559 INFO L182 omatonBuilderFactory]: Interpolants [219539#false, 219538#true, 219543#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 219542#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 219541#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 219540#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 219547#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 219546#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 219545#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 219544#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 219551#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 219550#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 219549#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 219548#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 219555#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 219554#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 219553#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 219552#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 219559#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 219558#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 219557#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 219556#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 219563#(<= main_~i~1 21), 219562#(<= main_~i~1 20), 219561#(<= main_~i~1 19), 219560#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 219567#(<= main_~i~1 25), 219566#(<= main_~i~1 24), 219565#(<= main_~i~1 23), 219564#(<= main_~i~1 22)] [2018-04-13 00:10:55,566 INFO L134 CoverageAnalysis]: Checked inductivity of 409112 backedges. 28357 proven. 14119 refuted. 0 times theorem prover too weak. 366636 trivial. 0 not checked. [2018-04-13 00:10:55,566 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:55,566 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:55,566 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=268, Invalid=602, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:55,566 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:56,005 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:56,005 INFO L93 Difference]: Finished difference Result 1441 states and 3626 transitions. [2018-04-13 00:10:56,005 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2018-04-13 00:10:56,005 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2515 [2018-04-13 00:10:56,006 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:56,015 INFO L225 Difference]: With dead ends: 1441 [2018-04-13 00:10:56,015 INFO L226 Difference]: Without dead ends: 1441 [2018-04-13 00:10:56,015 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 342 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=728, Invalid=1722, Unknown=0, NotChecked=0, Total=2450 [2018-04-13 00:10:56,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1441 states. [2018-04-13 00:10:56,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1441 to 574. [2018-04-13 00:10:56,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:56,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:56,040 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2515 [2018-04-13 00:10:56,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:56,041 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:56,041 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:56,041 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:56,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2522 [2018-04-13 00:10:56,065 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:56,065 INFO L355 BasicCegarLoop]: trace histogram [388, 359, 359, 359, 359, 359, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:56,065 INFO L408 AbstractCegarLoop]: === Iteration 185 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:56,065 INFO L82 PathProgramCache]: Analyzing trace with hash 753174058, now seen corresponding path program 174 times [2018-04-13 00:10:56,065 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:56,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:56,181 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:10:58,146 INFO L134 CoverageAnalysis]: Checked inductivity of 411318 backedges. 32148 proven. 12392 refuted. 0 times theorem prover too weak. 366778 trivial. 0 not checked. [2018-04-13 00:10:58,147 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:10:58,147 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:10:58,147 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:10:58,148 INFO L134 CoverageAnalysis]: Checked inductivity of 21132 backedges. 1535 proven. 488 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:10:58,148 INFO L182 omatonBuilderFactory]: Interpolants [221635#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 221634#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 221633#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 221632#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 221639#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 221638#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 221637#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 221636#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 221643#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 221642#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 221641#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 221640#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 221647#(<= main_~i~1 20), 221646#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 221645#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 221644#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 221651#(<= main_~i~1 24), 221650#(<= main_~i~1 23), 221649#(<= main_~i~1 22), 221648#(<= main_~i~1 21), 221652#(<= main_~i~1 25), 221623#true, 221627#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 221626#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 221625#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 221624#false, 221631#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 221630#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 221629#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 221628#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3))] [2018-04-13 00:10:58,155 INFO L134 CoverageAnalysis]: Checked inductivity of 411318 backedges. 32148 proven. 12392 refuted. 0 times theorem prover too weak. 366778 trivial. 0 not checked. [2018-04-13 00:10:58,155 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:10:58,155 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:10:58,155 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=588, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:10:58,155 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:10:58,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:10:58,580 INFO L93 Difference]: Finished difference Result 1336 states and 3303 transitions. [2018-04-13 00:10:58,580 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2018-04-13 00:10:58,580 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2521 [2018-04-13 00:10:58,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:10:58,589 INFO L225 Difference]: With dead ends: 1336 [2018-04-13 00:10:58,590 INFO L226 Difference]: Without dead ends: 1336 [2018-04-13 00:10:58,590 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 350 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=786, Invalid=1764, Unknown=0, NotChecked=0, Total=2550 [2018-04-13 00:10:58,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1336 states. [2018-04-13 00:10:58,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1336 to 574. [2018-04-13 00:10:58,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:10:58,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:10:58,612 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2521 [2018-04-13 00:10:58,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:10:58,612 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:10:58,613 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:10:58,613 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:10:58,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2528 [2018-04-13 00:10:58,641 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:10:58,641 INFO L355 BasicCegarLoop]: trace histogram [389, 360, 360, 360, 360, 360, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:10:58,641 INFO L408 AbstractCegarLoop]: === Iteration 186 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:10:58,641 INFO L82 PathProgramCache]: Analyzing trace with hash 1819052402, now seen corresponding path program 175 times [2018-04-13 00:10:58,642 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:10:58,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:10:58,754 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:00,788 INFO L134 CoverageAnalysis]: Checked inductivity of 413530 backedges. 36299 proven. 10305 refuted. 0 times theorem prover too weak. 366926 trivial. 0 not checked. [2018-04-13 00:11:00,789 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:00,789 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:11:00,789 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:00,790 INFO L134 CoverageAnalysis]: Checked inductivity of 21156 backedges. 1663 proven. 384 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:11:00,790 INFO L182 omatonBuilderFactory]: Interpolants [223619#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 223618#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 223617#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 223616#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 223623#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 223622#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 223621#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 223620#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 223627#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 223626#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 223625#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 223624#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 223631#(<= main_~i~1 22), 223630#(<= main_~i~1 21), 223629#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21), 223628#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 223634#(<= main_~i~1 25), 223633#(<= main_~i~1 24), 223632#(<= main_~i~1 23), 223607#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 223606#false, 223605#true, 223611#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 223610#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 223609#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 223608#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 223615#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 223614#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 223613#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 223612#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5))] [2018-04-13 00:11:00,797 INFO L134 CoverageAnalysis]: Checked inductivity of 413530 backedges. 36299 proven. 10305 refuted. 0 times theorem prover too weak. 366926 trivial. 0 not checked. [2018-04-13 00:11:00,797 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:11:00,797 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:11:00,798 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=298, Invalid=572, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:11:00,798 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:11:01,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:01,242 INFO L93 Difference]: Finished difference Result 1219 states and 2938 transitions. [2018-04-13 00:11:01,243 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2018-04-13 00:11:01,243 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2527 [2018-04-13 00:11:01,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:01,251 INFO L225 Difference]: With dead ends: 1219 [2018-04-13 00:11:01,251 INFO L226 Difference]: Without dead ends: 1219 [2018-04-13 00:11:01,252 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 357 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=848, Invalid=1804, Unknown=0, NotChecked=0, Total=2652 [2018-04-13 00:11:01,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1219 states. [2018-04-13 00:11:01,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1219 to 574. [2018-04-13 00:11:01,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:11:01,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:11:01,277 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2527 [2018-04-13 00:11:01,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:01,277 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:11:01,278 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:11:01,278 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:11:01,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2534 [2018-04-13 00:11:01,310 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:01,310 INFO L355 BasicCegarLoop]: trace histogram [390, 361, 361, 361, 361, 361, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:01,310 INFO L408 AbstractCegarLoop]: === Iteration 187 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:01,310 INFO L82 PathProgramCache]: Analyzing trace with hash 282144250, now seen corresponding path program 176 times [2018-04-13 00:11:01,311 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:01,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:01,467 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:03,565 INFO L134 CoverageAnalysis]: Checked inductivity of 415748 backedges. 40828 proven. 7840 refuted. 0 times theorem prover too weak. 367080 trivial. 0 not checked. [2018-04-13 00:11:03,565 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:03,566 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:11:03,566 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:03,567 INFO L134 CoverageAnalysis]: Checked inductivity of 21174 backedges. 1797 proven. 268 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:11:03,567 INFO L182 omatonBuilderFactory]: Interpolants [225475#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 225474#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 225473#false, 225472#true, 225479#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 225478#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 225477#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 225476#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 225483#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 225482#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 225481#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 225480#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 225487#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 225486#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 225485#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 225484#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 225491#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 225490#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 225489#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 225488#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 225495#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 225494#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 225493#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 225492#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 225499#(<= main_~i~1 23), 225498#(<= main_~i~1 22), 225497#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 22), 225496#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 225501#(<= main_~i~1 25), 225500#(<= main_~i~1 24)] [2018-04-13 00:11:03,574 INFO L134 CoverageAnalysis]: Checked inductivity of 415748 backedges. 40828 proven. 7840 refuted. 0 times theorem prover too weak. 367080 trivial. 0 not checked. [2018-04-13 00:11:03,574 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:11:03,574 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:11:03,574 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=316, Invalid=554, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:11:03,574 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:11:04,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:04,024 INFO L93 Difference]: Finished difference Result 1090 states and 2530 transitions. [2018-04-13 00:11:04,024 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2018-04-13 00:11:04,024 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2533 [2018-04-13 00:11:04,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:04,031 INFO L225 Difference]: With dead ends: 1090 [2018-04-13 00:11:04,031 INFO L226 Difference]: Without dead ends: 1090 [2018-04-13 00:11:04,031 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 363 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=914, Invalid=1842, Unknown=0, NotChecked=0, Total=2756 [2018-04-13 00:11:04,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1090 states. [2018-04-13 00:11:04,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1090 to 574. [2018-04-13 00:11:04,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:11:04,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:11:04,049 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2533 [2018-04-13 00:11:04,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:04,050 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:11:04,050 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:11:04,050 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:11:04,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2540 [2018-04-13 00:11:04,075 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:04,075 INFO L355 BasicCegarLoop]: trace histogram [391, 362, 362, 362, 362, 362, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:04,075 INFO L408 AbstractCegarLoop]: === Iteration 188 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:04,076 INFO L82 PathProgramCache]: Analyzing trace with hash 1264096194, now seen corresponding path program 177 times [2018-04-13 00:11:04,076 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:04,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:04,199 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:06,185 INFO L134 CoverageAnalysis]: Checked inductivity of 417972 backedges. 45753 proven. 4979 refuted. 0 times theorem prover too weak. 367240 trivial. 0 not checked. [2018-04-13 00:11:06,186 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:06,186 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:11:06,186 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:06,187 INFO L134 CoverageAnalysis]: Checked inductivity of 21186 backedges. 1937 proven. 140 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:11:06,187 INFO L182 omatonBuilderFactory]: Interpolants [227215#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 227214#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 227213#false, 227212#true, 227219#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 227218#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 227217#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 227216#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 227223#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 227222#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 227221#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 227220#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 227227#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 227226#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 227225#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 227224#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 227231#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 227230#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 227229#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 227228#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 227235#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 227234#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 227233#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 227232#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 227239#(<= main_~i~1 23), 227238#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 23), 227237#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 227236#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 227241#(<= main_~i~1 25), 227240#(<= main_~i~1 24)] [2018-04-13 00:11:06,194 INFO L134 CoverageAnalysis]: Checked inductivity of 417972 backedges. 45753 proven. 4979 refuted. 0 times theorem prover too weak. 367240 trivial. 0 not checked. [2018-04-13 00:11:06,194 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:11:06,194 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:11:06,194 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=336, Invalid=534, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:11:06,194 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:11:06,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:06,651 INFO L93 Difference]: Finished difference Result 953 states and 2082 transitions. [2018-04-13 00:11:06,651 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2018-04-13 00:11:06,651 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2539 [2018-04-13 00:11:06,652 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:06,656 INFO L225 Difference]: With dead ends: 953 [2018-04-13 00:11:06,656 INFO L226 Difference]: Without dead ends: 953 [2018-04-13 00:11:06,656 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 368 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=984, Invalid=1878, Unknown=0, NotChecked=0, Total=2862 [2018-04-13 00:11:06,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 953 states. [2018-04-13 00:11:06,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 953 to 574. [2018-04-13 00:11:06,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-04-13 00:11:06,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 994 transitions. [2018-04-13 00:11:06,671 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 994 transitions. Word has length 2539 [2018-04-13 00:11:06,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:06,671 INFO L459 AbstractCegarLoop]: Abstraction has 574 states and 994 transitions. [2018-04-13 00:11:06,671 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:11:06,671 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 994 transitions. [2018-04-13 00:11:06,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2546 [2018-04-13 00:11:06,695 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:06,695 INFO L355 BasicCegarLoop]: trace histogram [392, 363, 363, 363, 363, 363, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:06,695 INFO L408 AbstractCegarLoop]: === Iteration 189 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:06,695 INFO L82 PathProgramCache]: Analyzing trace with hash 1550273226, now seen corresponding path program 178 times [2018-04-13 00:11:06,696 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:06,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:06,811 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:08,920 INFO L134 CoverageAnalysis]: Checked inductivity of 420202 backedges. 51092 proven. 1704 refuted. 0 times theorem prover too weak. 367406 trivial. 0 not checked. [2018-04-13 00:11:08,920 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:08,920 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2018-04-13 00:11:08,921 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:08,921 INFO L134 CoverageAnalysis]: Checked inductivity of 21192 backedges. 2083 proven. 0 refuted. 0 times theorem prover too weak. 19109 trivial. 0 not checked. [2018-04-13 00:11:08,921 INFO L182 omatonBuilderFactory]: Interpolants [228819#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 228818#false, 228817#true, 228823#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 228822#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 228821#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 228820#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 228827#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 228826#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 228825#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 228824#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 228831#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 228830#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 228829#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 228828#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 228835#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 228834#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 228833#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 228832#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 228839#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 228838#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 228837#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 228836#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 228843#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 228842#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 228841#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 228840#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 228846#(<= main_~i~1 25), 228845#(<= main_~i~1 24), 228844#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 24)] [2018-04-13 00:11:08,929 INFO L134 CoverageAnalysis]: Checked inductivity of 420202 backedges. 51092 proven. 1704 refuted. 0 times theorem prover too weak. 367406 trivial. 0 not checked. [2018-04-13 00:11:08,929 INFO L442 AbstractCegarLoop]: Interpolant automaton has 30 states [2018-04-13 00:11:08,929 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2018-04-13 00:11:08,929 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=358, Invalid=512, Unknown=0, NotChecked=0, Total=870 [2018-04-13 00:11:08,929 INFO L87 Difference]: Start difference. First operand 574 states and 994 transitions. Second operand 30 states. [2018-04-13 00:11:09,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:09,356 INFO L93 Difference]: Finished difference Result 809 states and 1647 transitions. [2018-04-13 00:11:09,356 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2018-04-13 00:11:09,356 INFO L78 Accepts]: Start accepts. Automaton has 30 states. Word has length 2545 [2018-04-13 00:11:09,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:09,361 INFO L225 Difference]: With dead ends: 809 [2018-04-13 00:11:09,361 INFO L226 Difference]: Without dead ends: 809 [2018-04-13 00:11:09,361 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 372 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=1058, Invalid=1912, Unknown=0, NotChecked=0, Total=2970 [2018-04-13 00:11:09,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 809 states. [2018-04-13 00:11:09,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 809 to 583. [2018-04-13 00:11:09,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 583 states. [2018-04-13 00:11:09,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 583 states to 583 states and 1030 transitions. [2018-04-13 00:11:09,373 INFO L78 Accepts]: Start accepts. Automaton has 583 states and 1030 transitions. Word has length 2545 [2018-04-13 00:11:09,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:09,374 INFO L459 AbstractCegarLoop]: Abstraction has 583 states and 1030 transitions. [2018-04-13 00:11:09,374 INFO L460 AbstractCegarLoop]: Interpolant automaton has 30 states. [2018-04-13 00:11:09,374 INFO L276 IsEmpty]: Start isEmpty. Operand 583 states and 1030 transitions. [2018-04-13 00:11:09,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2552 [2018-04-13 00:11:09,399 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:09,399 INFO L355 BasicCegarLoop]: trace histogram [393, 364, 364, 364, 364, 364, 30, 29, 29, 29, 29, 29, 29, 29, 29, 29, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:09,399 INFO L408 AbstractCegarLoop]: === Iteration 190 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:09,399 INFO L82 PathProgramCache]: Analyzing trace with hash -1802743022, now seen corresponding path program 179 times [2018-04-13 00:11:09,400 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:09,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:09,523 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:11,474 INFO L134 CoverageAnalysis]: Checked inductivity of 422438 backedges. 0 proven. 2494 refuted. 0 times theorem prover too weak. 419944 trivial. 0 not checked. [2018-04-13 00:11:11,475 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:11,475 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:11:11,475 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:11,476 INFO L134 CoverageAnalysis]: Checked inductivity of 21189 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 21189 trivial. 0 not checked. [2018-04-13 00:11:11,476 INFO L182 omatonBuilderFactory]: Interpolants [230291#(= main_~i~1 0), 230290#false, 230289#true, 230295#(<= main_~i~1 4), 230294#(<= main_~i~1 3), 230293#(<= main_~i~1 2), 230292#(<= main_~i~1 1), 230299#(<= main_~i~1 8), 230298#(<= main_~i~1 7), 230297#(<= main_~i~1 6), 230296#(<= main_~i~1 5), 230303#(<= main_~i~1 12), 230302#(<= main_~i~1 11), 230301#(<= main_~i~1 10), 230300#(<= main_~i~1 9), 230307#(<= main_~i~1 16), 230306#(<= main_~i~1 15), 230305#(<= main_~i~1 14), 230304#(<= main_~i~1 13), 230311#(<= main_~i~1 20), 230310#(<= main_~i~1 19), 230309#(<= main_~i~1 18), 230308#(<= main_~i~1 17), 230315#(<= main_~i~1 24), 230314#(<= main_~i~1 23), 230313#(<= main_~i~1 22), 230312#(<= main_~i~1 21), 230319#(<= main_~i~1 28), 230318#(<= main_~i~1 27), 230317#(<= main_~i~1 26), 230316#(<= main_~i~1 25), 230320#(<= main_~i~1 29)] [2018-04-13 00:11:11,482 INFO L134 CoverageAnalysis]: Checked inductivity of 422438 backedges. 0 proven. 2494 refuted. 0 times theorem prover too weak. 419944 trivial. 0 not checked. [2018-04-13 00:11:11,482 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:11:11,482 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:11:11,482 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=496, Invalid=496, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:11:11,482 INFO L87 Difference]: Start difference. First operand 583 states and 1030 transitions. Second operand 32 states. [2018-04-13 00:11:11,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:11,764 INFO L93 Difference]: Finished difference Result 1311 states and 2900 transitions. [2018-04-13 00:11:11,764 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-04-13 00:11:11,765 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2551 [2018-04-13 00:11:11,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:11,772 INFO L225 Difference]: With dead ends: 1311 [2018-04-13 00:11:11,773 INFO L226 Difference]: Without dead ends: 1311 [2018-04-13 00:11:11,773 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=496, Invalid=496, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:11:11,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1311 states. [2018-04-13 00:11:11,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1311 to 594. [2018-04-13 00:11:11,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:11,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:11,796 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2551 [2018-04-13 00:11:11,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:11,797 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:11,797 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:11:11,797 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:11,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2642 [2018-04-13 00:11:11,822 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:11,822 INFO L355 BasicCegarLoop]: trace histogram [407, 377, 377, 377, 377, 377, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:11,822 INFO L408 AbstractCegarLoop]: === Iteration 191 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:11,823 INFO L82 PathProgramCache]: Analyzing trace with hash 832765115, now seen corresponding path program 180 times [2018-04-13 00:11:11,823 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:11,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:11,956 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:14,100 INFO L134 CoverageAnalysis]: Checked inductivity of 453156 backedges. 12269 proven. 20030 refuted. 0 times theorem prover too weak. 420857 trivial. 0 not checked. [2018-04-13 00:11:14,101 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:14,101 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:14,101 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:14,102 INFO L134 CoverageAnalysis]: Checked inductivity of 22992 backedges. 816 proven. 960 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:14,102 INFO L182 omatonBuilderFactory]: Interpolants [232256#(<= main_~i~1 26), 232227#false, 232226#true, 232231#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 232230#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 232229#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 232228#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 232235#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 232234#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 232233#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 232232#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 232239#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 232238#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 232237#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 232236#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 232243#(<= main_~i~1 13), 232242#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 232241#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 232240#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 232247#(<= main_~i~1 17), 232246#(<= main_~i~1 16), 232245#(<= main_~i~1 15), 232244#(<= main_~i~1 14), 232251#(<= main_~i~1 21), 232250#(<= main_~i~1 20), 232249#(<= main_~i~1 19), 232248#(<= main_~i~1 18), 232255#(<= main_~i~1 25), 232254#(<= main_~i~1 24), 232253#(<= main_~i~1 23), 232252#(<= main_~i~1 22)] [2018-04-13 00:11:14,109 INFO L134 CoverageAnalysis]: Checked inductivity of 453156 backedges. 12269 proven. 20030 refuted. 0 times theorem prover too weak. 420857 trivial. 0 not checked. [2018-04-13 00:11:14,109 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:14,110 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:14,110 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=241, Invalid=689, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:14,110 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:14,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:14,591 INFO L93 Difference]: Finished difference Result 1940 states and 5298 transitions. [2018-04-13 00:11:14,591 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:11:14,591 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2641 [2018-04-13 00:11:14,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:14,605 INFO L225 Difference]: With dead ends: 1940 [2018-04-13 00:11:14,605 INFO L226 Difference]: Without dead ends: 1940 [2018-04-13 00:11:14,605 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 286 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=479, Invalid=1501, Unknown=0, NotChecked=0, Total=1980 [2018-04-13 00:11:14,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1940 states. [2018-04-13 00:11:14,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1940 to 594. [2018-04-13 00:11:14,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:14,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:14,644 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2641 [2018-04-13 00:11:14,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:14,645 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:14,645 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:14,645 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:14,670 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2648 [2018-04-13 00:11:14,670 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:14,670 INFO L355 BasicCegarLoop]: trace histogram [408, 378, 378, 378, 378, 378, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:14,670 INFO L408 AbstractCegarLoop]: === Iteration 192 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:14,671 INFO L82 PathProgramCache]: Analyzing trace with hash -564120253, now seen corresponding path program 181 times [2018-04-13 00:11:14,671 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:14,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:14,836 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:17,013 INFO L134 CoverageAnalysis]: Checked inductivity of 455478 backedges. 14284 proven. 20231 refuted. 0 times theorem prover too weak. 420963 trivial. 0 not checked. [2018-04-13 00:11:17,013 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:17,013 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:17,013 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:17,015 INFO L134 CoverageAnalysis]: Checked inductivity of 23055 backedges. 893 proven. 946 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:17,015 INFO L182 omatonBuilderFactory]: Interpolants [234819#true, 234823#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 234822#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 234821#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 234820#false, 234827#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 234826#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 234825#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 234824#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 234831#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 234830#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 234829#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 234828#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 234835#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 234834#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 234833#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 234832#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 234839#(<= main_~i~1 16), 234838#(<= main_~i~1 15), 234837#(<= main_~i~1 14), 234836#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 234843#(<= main_~i~1 20), 234842#(<= main_~i~1 19), 234841#(<= main_~i~1 18), 234840#(<= main_~i~1 17), 234847#(<= main_~i~1 24), 234846#(<= main_~i~1 23), 234845#(<= main_~i~1 22), 234844#(<= main_~i~1 21), 234849#(<= main_~i~1 26), 234848#(<= main_~i~1 25)] [2018-04-13 00:11:17,023 INFO L134 CoverageAnalysis]: Checked inductivity of 455478 backedges. 14284 proven. 20231 refuted. 0 times theorem prover too weak. 420963 trivial. 0 not checked. [2018-04-13 00:11:17,023 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:17,024 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:17,024 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=242, Invalid=688, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:17,024 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:17,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:17,498 INFO L93 Difference]: Finished difference Result 1913 states and 5220 transitions. [2018-04-13 00:11:17,498 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2018-04-13 00:11:17,498 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2647 [2018-04-13 00:11:17,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:17,512 INFO L225 Difference]: With dead ends: 1913 [2018-04-13 00:11:17,512 INFO L226 Difference]: Without dead ends: 1913 [2018-04-13 00:11:17,513 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 301 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=512, Invalid=1558, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:11:17,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1913 states. [2018-04-13 00:11:17,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1913 to 594. [2018-04-13 00:11:17,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:17,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:17,552 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2647 [2018-04-13 00:11:17,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:17,553 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:17,553 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:17,553 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:17,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2654 [2018-04-13 00:11:17,579 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:17,579 INFO L355 BasicCegarLoop]: trace histogram [409, 379, 379, 379, 379, 379, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:17,579 INFO L408 AbstractCegarLoop]: === Iteration 193 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:17,580 INFO L82 PathProgramCache]: Analyzing trace with hash -1882775797, now seen corresponding path program 182 times [2018-04-13 00:11:17,580 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:17,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:17,706 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:19,895 INFO L134 CoverageAnalysis]: Checked inductivity of 457806 backedges. 16551 proven. 20180 refuted. 0 times theorem prover too weak. 421075 trivial. 0 not checked. [2018-04-13 00:11:19,895 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:19,895 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:19,895 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:19,896 INFO L134 CoverageAnalysis]: Checked inductivity of 23121 backedges. 985 proven. 920 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:19,896 INFO L182 omatonBuilderFactory]: Interpolants [237387#true, 237391#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 237390#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 237389#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 237388#false, 237395#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 237394#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 237393#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 237392#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 237399#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 237398#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 237397#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 237396#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 237403#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 237402#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 237401#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 237400#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 237407#(<= main_~i~1 16), 237406#(<= main_~i~1 15), 237405#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 237404#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 237411#(<= main_~i~1 20), 237410#(<= main_~i~1 19), 237409#(<= main_~i~1 18), 237408#(<= main_~i~1 17), 237415#(<= main_~i~1 24), 237414#(<= main_~i~1 23), 237413#(<= main_~i~1 22), 237412#(<= main_~i~1 21), 237417#(<= main_~i~1 26), 237416#(<= main_~i~1 25)] [2018-04-13 00:11:19,904 INFO L134 CoverageAnalysis]: Checked inductivity of 457806 backedges. 16551 proven. 20180 refuted. 0 times theorem prover too weak. 421075 trivial. 0 not checked. [2018-04-13 00:11:19,904 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:19,904 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:19,904 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=245, Invalid=685, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:19,904 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:20,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:20,404 INFO L93 Difference]: Finished difference Result 1874 states and 5104 transitions. [2018-04-13 00:11:20,404 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:11:20,404 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2653 [2018-04-13 00:11:20,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:20,420 INFO L225 Difference]: With dead ends: 1874 [2018-04-13 00:11:20,420 INFO L226 Difference]: Without dead ends: 1874 [2018-04-13 00:11:20,420 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 315 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=549, Invalid=1613, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:11:20,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1874 states. [2018-04-13 00:11:20,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1874 to 594. [2018-04-13 00:11:20,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:20,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:20,464 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2653 [2018-04-13 00:11:20,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:20,465 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:20,465 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:20,465 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:20,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2660 [2018-04-13 00:11:20,493 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:20,493 INFO L355 BasicCegarLoop]: trace histogram [410, 380, 380, 380, 380, 380, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:20,493 INFO L408 AbstractCegarLoop]: === Iteration 194 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:20,493 INFO L82 PathProgramCache]: Analyzing trace with hash -979056109, now seen corresponding path program 183 times [2018-04-13 00:11:20,493 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:20,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:20,621 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:22,825 INFO L134 CoverageAnalysis]: Checked inductivity of 460140 backedges. 19088 proven. 19859 refuted. 0 times theorem prover too weak. 421193 trivial. 0 not checked. [2018-04-13 00:11:22,826 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:22,826 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:22,826 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:22,827 INFO L134 CoverageAnalysis]: Checked inductivity of 23181 backedges. 1083 proven. 882 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:22,827 INFO L182 omatonBuilderFactory]: Interpolants [239939#(<= main_~i~1 17), 239938#(<= main_~i~1 16), 239937#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 239936#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 239943#(<= main_~i~1 21), 239942#(<= main_~i~1 20), 239941#(<= main_~i~1 19), 239940#(<= main_~i~1 18), 239947#(<= main_~i~1 25), 239946#(<= main_~i~1 24), 239945#(<= main_~i~1 23), 239944#(<= main_~i~1 22), 239948#(<= main_~i~1 26), 239919#false, 239918#true, 239923#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 239922#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 239921#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 239920#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 239927#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 239926#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 239925#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 239924#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 239931#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 239930#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 239929#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 239928#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 239935#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 239934#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 239933#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 239932#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:11:22,834 INFO L134 CoverageAnalysis]: Checked inductivity of 460140 backedges. 19088 proven. 19859 refuted. 0 times theorem prover too weak. 421193 trivial. 0 not checked. [2018-04-13 00:11:22,835 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:22,835 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:22,835 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=250, Invalid=680, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:22,835 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:23,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:23,268 INFO L93 Difference]: Finished difference Result 1823 states and 4950 transitions. [2018-04-13 00:11:23,269 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:11:23,269 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2659 [2018-04-13 00:11:23,270 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:23,285 INFO L225 Difference]: With dead ends: 1823 [2018-04-13 00:11:23,285 INFO L226 Difference]: Without dead ends: 1823 [2018-04-13 00:11:23,285 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 328 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=590, Invalid=1666, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:11:23,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1823 states. [2018-04-13 00:11:23,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1823 to 594. [2018-04-13 00:11:23,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:23,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:23,328 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2659 [2018-04-13 00:11:23,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:23,329 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:23,329 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:23,329 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:23,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2666 [2018-04-13 00:11:23,357 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:23,357 INFO L355 BasicCegarLoop]: trace histogram [411, 381, 381, 381, 381, 381, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:23,357 INFO L408 AbstractCegarLoop]: === Iteration 195 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:23,357 INFO L82 PathProgramCache]: Analyzing trace with hash 746894939, now seen corresponding path program 184 times [2018-04-13 00:11:23,358 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:23,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:23,496 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:25,708 INFO L134 CoverageAnalysis]: Checked inductivity of 462480 backedges. 21913 proven. 19250 refuted. 0 times theorem prover too weak. 421317 trivial. 0 not checked. [2018-04-13 00:11:25,708 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:25,731 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:25,731 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:25,732 INFO L134 CoverageAnalysis]: Checked inductivity of 23235 backedges. 1187 proven. 832 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:25,732 INFO L182 omatonBuilderFactory]: Interpolants [242403#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 242402#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 242401#false, 242400#true, 242407#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 242406#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 242405#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 242404#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 242411#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 242410#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 242409#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 242408#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 242415#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 242414#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 242413#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 242412#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 242419#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 242418#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 242417#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 242416#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 242423#(<= main_~i~1 19), 242422#(<= main_~i~1 18), 242421#(<= main_~i~1 17), 242420#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 242427#(<= main_~i~1 23), 242426#(<= main_~i~1 22), 242425#(<= main_~i~1 21), 242424#(<= main_~i~1 20), 242430#(<= main_~i~1 26), 242429#(<= main_~i~1 25), 242428#(<= main_~i~1 24)] [2018-04-13 00:11:25,739 INFO L134 CoverageAnalysis]: Checked inductivity of 462480 backedges. 21913 proven. 19250 refuted. 0 times theorem prover too weak. 421317 trivial. 0 not checked. [2018-04-13 00:11:25,740 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:25,740 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:25,740 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=257, Invalid=673, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:25,740 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:26,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:26,197 INFO L93 Difference]: Finished difference Result 1760 states and 4757 transitions. [2018-04-13 00:11:26,197 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-04-13 00:11:26,197 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2665 [2018-04-13 00:11:26,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:26,210 INFO L225 Difference]: With dead ends: 1760 [2018-04-13 00:11:26,210 INFO L226 Difference]: Without dead ends: 1760 [2018-04-13 00:11:26,211 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 340 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=635, Invalid=1717, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:11:26,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1760 states. [2018-04-13 00:11:26,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1760 to 594. [2018-04-13 00:11:26,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:26,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:26,245 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2665 [2018-04-13 00:11:26,246 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:26,246 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:26,246 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:26,246 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:26,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2672 [2018-04-13 00:11:26,272 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:26,272 INFO L355 BasicCegarLoop]: trace histogram [412, 382, 382, 382, 382, 382, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:26,272 INFO L408 AbstractCegarLoop]: === Iteration 196 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:26,272 INFO L82 PathProgramCache]: Analyzing trace with hash -510077981, now seen corresponding path program 185 times [2018-04-13 00:11:26,273 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:26,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:26,401 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:28,616 INFO L134 CoverageAnalysis]: Checked inductivity of 464826 backedges. 25044 proven. 18335 refuted. 0 times theorem prover too weak. 421447 trivial. 0 not checked. [2018-04-13 00:11:28,617 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:28,617 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:28,617 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:28,618 INFO L134 CoverageAnalysis]: Checked inductivity of 23283 backedges. 1297 proven. 770 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:28,618 INFO L182 omatonBuilderFactory]: Interpolants [244823#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 244822#false, 244821#true, 244827#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 244826#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 244825#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 244824#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 244831#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 244830#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 244829#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 244828#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 244835#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 244834#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 244833#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 244832#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 244839#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 244838#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 244837#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 244836#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 244843#(<= main_~i~1 18), 244842#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 244841#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 244840#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 244847#(<= main_~i~1 22), 244846#(<= main_~i~1 21), 244845#(<= main_~i~1 20), 244844#(<= main_~i~1 19), 244851#(<= main_~i~1 26), 244850#(<= main_~i~1 25), 244849#(<= main_~i~1 24), 244848#(<= main_~i~1 23)] [2018-04-13 00:11:28,626 INFO L134 CoverageAnalysis]: Checked inductivity of 464826 backedges. 25044 proven. 18335 refuted. 0 times theorem prover too weak. 421447 trivial. 0 not checked. [2018-04-13 00:11:28,626 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:28,626 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:28,626 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=266, Invalid=664, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:28,626 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:29,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:29,148 INFO L93 Difference]: Finished difference Result 1685 states and 4524 transitions. [2018-04-13 00:11:29,148 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2018-04-13 00:11:29,148 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2671 [2018-04-13 00:11:29,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:29,161 INFO L225 Difference]: With dead ends: 1685 [2018-04-13 00:11:29,161 INFO L226 Difference]: Without dead ends: 1685 [2018-04-13 00:11:29,161 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 351 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=684, Invalid=1766, Unknown=0, NotChecked=0, Total=2450 [2018-04-13 00:11:29,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1685 states. [2018-04-13 00:11:29,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1685 to 594. [2018-04-13 00:11:29,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:29,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:29,194 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2671 [2018-04-13 00:11:29,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:29,195 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:29,195 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:29,195 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:29,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2678 [2018-04-13 00:11:29,222 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:29,222 INFO L355 BasicCegarLoop]: trace histogram [413, 383, 383, 383, 383, 383, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:29,222 INFO L408 AbstractCegarLoop]: === Iteration 197 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:29,222 INFO L82 PathProgramCache]: Analyzing trace with hash 106791595, now seen corresponding path program 186 times [2018-04-13 00:11:29,223 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:29,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:29,351 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:31,587 INFO L134 CoverageAnalysis]: Checked inductivity of 467178 backedges. 28499 proven. 17096 refuted. 0 times theorem prover too weak. 421583 trivial. 0 not checked. [2018-04-13 00:11:31,587 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:31,587 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:31,587 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:31,588 INFO L134 CoverageAnalysis]: Checked inductivity of 23325 backedges. 1413 proven. 696 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:31,588 INFO L182 omatonBuilderFactory]: Interpolants [247171#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 247170#false, 247169#true, 247175#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 247174#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 247173#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 247172#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 247179#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 247178#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 247177#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 247176#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 247183#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 247182#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 247181#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 247180#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 247187#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 247186#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 247185#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 247184#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 247191#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 247190#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 247189#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 247188#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 247195#(<= main_~i~1 22), 247194#(<= main_~i~1 21), 247193#(<= main_~i~1 20), 247192#(<= main_~i~1 19), 247199#(<= main_~i~1 26), 247198#(<= main_~i~1 25), 247197#(<= main_~i~1 24), 247196#(<= main_~i~1 23)] [2018-04-13 00:11:31,596 INFO L134 CoverageAnalysis]: Checked inductivity of 467178 backedges. 28499 proven. 17096 refuted. 0 times theorem prover too weak. 421583 trivial. 0 not checked. [2018-04-13 00:11:31,596 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:31,597 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:31,597 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=277, Invalid=653, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:31,597 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:32,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:32,068 INFO L93 Difference]: Finished difference Result 1598 states and 4250 transitions. [2018-04-13 00:11:32,068 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2018-04-13 00:11:32,068 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2677 [2018-04-13 00:11:32,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:32,079 INFO L225 Difference]: With dead ends: 1598 [2018-04-13 00:11:32,079 INFO L226 Difference]: Without dead ends: 1598 [2018-04-13 00:11:32,079 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 361 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=737, Invalid=1813, Unknown=0, NotChecked=0, Total=2550 [2018-04-13 00:11:32,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1598 states. [2018-04-13 00:11:32,105 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1598 to 594. [2018-04-13 00:11:32,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:32,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:32,107 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2677 [2018-04-13 00:11:32,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:32,108 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:32,108 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:32,108 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:32,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2684 [2018-04-13 00:11:32,135 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:32,135 INFO L355 BasicCegarLoop]: trace histogram [414, 384, 384, 384, 384, 384, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:32,135 INFO L408 AbstractCegarLoop]: === Iteration 198 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:32,135 INFO L82 PathProgramCache]: Analyzing trace with hash -1728474445, now seen corresponding path program 187 times [2018-04-13 00:11:32,135 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:32,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:32,268 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:34,534 INFO L134 CoverageAnalysis]: Checked inductivity of 469536 backedges. 32296 proven. 15515 refuted. 0 times theorem prover too weak. 421725 trivial. 0 not checked. [2018-04-13 00:11:34,534 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:34,535 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:34,535 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:34,536 INFO L134 CoverageAnalysis]: Checked inductivity of 23361 backedges. 1535 proven. 610 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:34,536 INFO L182 omatonBuilderFactory]: Interpolants [249435#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 249434#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 249433#false, 249432#true, 249439#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 249438#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 249437#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 249436#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 249443#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 249442#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 249441#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 249440#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 249447#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 249446#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 249445#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 249444#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 249451#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 249450#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 249449#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 249448#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 249455#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 249454#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 249453#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 249452#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 249459#(<= main_~i~1 23), 249458#(<= main_~i~1 22), 249457#(<= main_~i~1 21), 249456#(<= main_~i~1 20), 249462#(<= main_~i~1 26), 249461#(<= main_~i~1 25), 249460#(<= main_~i~1 24)] [2018-04-13 00:11:34,544 INFO L134 CoverageAnalysis]: Checked inductivity of 469536 backedges. 32296 proven. 15515 refuted. 0 times theorem prover too weak. 421725 trivial. 0 not checked. [2018-04-13 00:11:34,544 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:34,544 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:34,544 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=290, Invalid=640, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:34,544 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:35,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:35,044 INFO L93 Difference]: Finished difference Result 1499 states and 3934 transitions. [2018-04-13 00:11:35,044 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2018-04-13 00:11:35,044 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2683 [2018-04-13 00:11:35,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:35,055 INFO L225 Difference]: With dead ends: 1499 [2018-04-13 00:11:35,055 INFO L226 Difference]: Without dead ends: 1499 [2018-04-13 00:11:35,056 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 370 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=794, Invalid=1858, Unknown=0, NotChecked=0, Total=2652 [2018-04-13 00:11:35,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1499 states. [2018-04-13 00:11:35,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1499 to 594. [2018-04-13 00:11:35,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:35,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:35,084 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2683 [2018-04-13 00:11:35,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:35,085 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:35,085 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:35,085 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:35,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2690 [2018-04-13 00:11:35,112 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:35,112 INFO L355 BasicCegarLoop]: trace histogram [415, 385, 385, 385, 385, 385, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:35,112 INFO L408 AbstractCegarLoop]: === Iteration 199 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:35,112 INFO L82 PathProgramCache]: Analyzing trace with hash 928662523, now seen corresponding path program 188 times [2018-04-13 00:11:35,113 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:35,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:35,246 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:37,542 INFO L134 CoverageAnalysis]: Checked inductivity of 471900 backedges. 36453 proven. 13574 refuted. 0 times theorem prover too weak. 421873 trivial. 0 not checked. [2018-04-13 00:11:37,543 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:37,543 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:37,543 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:37,544 INFO L134 CoverageAnalysis]: Checked inductivity of 23391 backedges. 1663 proven. 512 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:37,544 INFO L182 omatonBuilderFactory]: Interpolants [251599#false, 251598#true, 251603#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 251602#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 251601#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 251600#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 251607#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 251606#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 251605#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 251604#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 251611#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 251610#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 251609#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 251608#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 251615#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 251614#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 251613#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 251612#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 251619#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 251618#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 251617#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 251616#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 251623#(<= main_~i~1 21), 251622#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21), 251621#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 251620#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 251627#(<= main_~i~1 25), 251626#(<= main_~i~1 24), 251625#(<= main_~i~1 23), 251624#(<= main_~i~1 22), 251628#(<= main_~i~1 26)] [2018-04-13 00:11:37,552 INFO L134 CoverageAnalysis]: Checked inductivity of 471900 backedges. 36453 proven. 13574 refuted. 0 times theorem prover too weak. 421873 trivial. 0 not checked. [2018-04-13 00:11:37,552 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:37,552 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:37,552 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=305, Invalid=625, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:37,552 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:38,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:38,030 INFO L93 Difference]: Finished difference Result 1388 states and 3575 transitions. [2018-04-13 00:11:38,030 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2018-04-13 00:11:38,031 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2689 [2018-04-13 00:11:38,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:38,040 INFO L225 Difference]: With dead ends: 1388 [2018-04-13 00:11:38,040 INFO L226 Difference]: Without dead ends: 1388 [2018-04-13 00:11:38,040 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 378 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=855, Invalid=1901, Unknown=0, NotChecked=0, Total=2756 [2018-04-13 00:11:38,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1388 states. [2018-04-13 00:11:38,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1388 to 594. [2018-04-13 00:11:38,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:38,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:38,065 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2689 [2018-04-13 00:11:38,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:38,065 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:38,065 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:38,066 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:38,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2696 [2018-04-13 00:11:38,092 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:38,092 INFO L355 BasicCegarLoop]: trace histogram [416, 386, 386, 386, 386, 386, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:38,092 INFO L408 AbstractCegarLoop]: === Iteration 200 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:38,092 INFO L82 PathProgramCache]: Analyzing trace with hash 604718723, now seen corresponding path program 189 times [2018-04-13 00:11:38,093 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:38,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:38,222 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:40,500 INFO L134 CoverageAnalysis]: Checked inductivity of 474270 backedges. 40988 proven. 11255 refuted. 0 times theorem prover too weak. 422027 trivial. 0 not checked. [2018-04-13 00:11:40,500 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:40,500 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:40,500 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:40,501 INFO L134 CoverageAnalysis]: Checked inductivity of 23415 backedges. 1797 proven. 402 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:40,501 INFO L182 omatonBuilderFactory]: Interpolants [253655#true, 253659#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 253658#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 253657#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 253656#false, 253663#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 253662#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 253661#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 253660#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 253667#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 253666#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 253665#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 253664#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 253671#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 253670#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 253669#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 253668#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 253675#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 253674#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 253673#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 253672#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 253679#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 253678#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 253677#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 253676#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 253683#(<= main_~i~1 24), 253682#(<= main_~i~1 23), 253681#(<= main_~i~1 22), 253680#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 22), 253685#(<= main_~i~1 26), 253684#(<= main_~i~1 25)] [2018-04-13 00:11:40,509 INFO L134 CoverageAnalysis]: Checked inductivity of 474270 backedges. 40988 proven. 11255 refuted. 0 times theorem prover too weak. 422027 trivial. 0 not checked. [2018-04-13 00:11:40,509 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:40,509 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:40,509 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=322, Invalid=608, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:40,509 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:40,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:40,986 INFO L93 Difference]: Finished difference Result 1265 states and 3172 transitions. [2018-04-13 00:11:40,986 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2018-04-13 00:11:40,986 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2695 [2018-04-13 00:11:40,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:40,996 INFO L225 Difference]: With dead ends: 1265 [2018-04-13 00:11:40,996 INFO L226 Difference]: Without dead ends: 1265 [2018-04-13 00:11:40,997 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 385 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=920, Invalid=1942, Unknown=0, NotChecked=0, Total=2862 [2018-04-13 00:11:40,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1265 states. [2018-04-13 00:11:41,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1265 to 594. [2018-04-13 00:11:41,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:41,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:41,023 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2695 [2018-04-13 00:11:41,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:41,024 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:41,024 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:41,024 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:41,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2702 [2018-04-13 00:11:41,052 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:41,053 INFO L355 BasicCegarLoop]: trace histogram [417, 387, 387, 387, 387, 387, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:41,053 INFO L408 AbstractCegarLoop]: === Iteration 201 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:41,053 INFO L82 PathProgramCache]: Analyzing trace with hash -724911541, now seen corresponding path program 190 times [2018-04-13 00:11:41,053 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:41,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:41,197 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:43,507 INFO L134 CoverageAnalysis]: Checked inductivity of 476646 backedges. 45919 proven. 8540 refuted. 0 times theorem prover too weak. 422187 trivial. 0 not checked. [2018-04-13 00:11:43,507 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:43,507 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:43,508 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:43,508 INFO L134 CoverageAnalysis]: Checked inductivity of 23433 backedges. 1937 proven. 280 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:43,509 INFO L182 omatonBuilderFactory]: Interpolants [255619#(<= main_~i~1 24), 255618#(<= main_~i~1 23), 255617#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 23), 255616#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 255621#(<= main_~i~1 26), 255620#(<= main_~i~1 25), 255591#true, 255595#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 255594#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 255593#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 255592#false, 255599#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 255598#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 255597#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 255596#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 255603#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 255602#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 255601#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 255600#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 255607#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 255606#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 255605#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 255604#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 255611#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 255610#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 255609#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 255608#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 255615#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 255614#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 255613#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 255612#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19))] [2018-04-13 00:11:43,516 INFO L134 CoverageAnalysis]: Checked inductivity of 476646 backedges. 45919 proven. 8540 refuted. 0 times theorem prover too weak. 422187 trivial. 0 not checked. [2018-04-13 00:11:43,517 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:43,517 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:43,517 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=341, Invalid=589, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:43,517 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:43,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:43,959 INFO L93 Difference]: Finished difference Result 1130 states and 2724 transitions. [2018-04-13 00:11:43,959 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2018-04-13 00:11:43,959 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2701 [2018-04-13 00:11:43,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:43,968 INFO L225 Difference]: With dead ends: 1130 [2018-04-13 00:11:43,968 INFO L226 Difference]: Without dead ends: 1130 [2018-04-13 00:11:43,969 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 391 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=989, Invalid=1981, Unknown=0, NotChecked=0, Total=2970 [2018-04-13 00:11:43,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1130 states. [2018-04-13 00:11:43,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1130 to 594. [2018-04-13 00:11:43,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:43,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:43,991 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2701 [2018-04-13 00:11:43,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:43,992 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:43,992 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:43,992 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:44,021 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2708 [2018-04-13 00:11:44,021 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:44,021 INFO L355 BasicCegarLoop]: trace histogram [418, 388, 388, 388, 388, 388, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:44,021 INFO L408 AbstractCegarLoop]: === Iteration 202 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:44,022 INFO L82 PathProgramCache]: Analyzing trace with hash -1009176749, now seen corresponding path program 191 times [2018-04-13 00:11:44,022 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:44,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:44,165 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:46,465 INFO L134 CoverageAnalysis]: Checked inductivity of 479028 backedges. 51264 proven. 5411 refuted. 0 times theorem prover too weak. 422353 trivial. 0 not checked. [2018-04-13 00:11:46,465 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:46,465 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:46,465 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:46,466 INFO L134 CoverageAnalysis]: Checked inductivity of 23445 backedges. 2083 proven. 146 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:46,466 INFO L182 omatonBuilderFactory]: Interpolants [257411#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 257410#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 257409#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 257408#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 257415#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 257414#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 257413#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 257412#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 257419#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 257418#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 257417#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 257416#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 257423#(<= main_~i~1 25), 257422#(<= main_~i~1 24), 257421#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 24), 257420#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 257424#(<= main_~i~1 26), 257395#false, 257394#true, 257399#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 257398#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 257397#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 257396#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 257403#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 257402#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 257401#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 257400#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 257407#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 257406#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 257405#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 257404#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8))] [2018-04-13 00:11:46,474 INFO L134 CoverageAnalysis]: Checked inductivity of 479028 backedges. 51264 proven. 5411 refuted. 0 times theorem prover too weak. 422353 trivial. 0 not checked. [2018-04-13 00:11:46,474 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:46,475 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:46,475 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=362, Invalid=568, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:46,475 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:46,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:46,963 INFO L93 Difference]: Finished difference Result 987 states and 2234 transitions. [2018-04-13 00:11:46,963 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2018-04-13 00:11:46,963 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2707 [2018-04-13 00:11:46,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:46,969 INFO L225 Difference]: With dead ends: 987 [2018-04-13 00:11:46,969 INFO L226 Difference]: Without dead ends: 987 [2018-04-13 00:11:46,969 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 396 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=1062, Invalid=2018, Unknown=0, NotChecked=0, Total=3080 [2018-04-13 00:11:46,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 987 states. [2018-04-13 00:11:46,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 987 to 594. [2018-04-13 00:11:46,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 594 states. [2018-04-13 00:11:46,986 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 594 states to 594 states and 1055 transitions. [2018-04-13 00:11:46,986 INFO L78 Accepts]: Start accepts. Automaton has 594 states and 1055 transitions. Word has length 2707 [2018-04-13 00:11:46,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:46,986 INFO L459 AbstractCegarLoop]: Abstraction has 594 states and 1055 transitions. [2018-04-13 00:11:46,987 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:46,987 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 1055 transitions. [2018-04-13 00:11:47,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2714 [2018-04-13 00:11:47,014 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:47,014 INFO L355 BasicCegarLoop]: trace histogram [419, 389, 389, 389, 389, 389, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:47,014 INFO L408 AbstractCegarLoop]: === Iteration 203 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:47,015 INFO L82 PathProgramCache]: Analyzing trace with hash 1845863835, now seen corresponding path program 192 times [2018-04-13 00:11:47,015 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:47,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:47,147 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:49,462 INFO L134 CoverageAnalysis]: Checked inductivity of 481416 backedges. 57041 proven. 1850 refuted. 0 times theorem prover too weak. 422525 trivial. 0 not checked. [2018-04-13 00:11:49,463 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:49,463 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2018-04-13 00:11:49,463 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:49,464 INFO L134 CoverageAnalysis]: Checked inductivity of 23451 backedges. 2235 proven. 0 refuted. 0 times theorem prover too weak. 21216 trivial. 0 not checked. [2018-04-13 00:11:49,464 INFO L182 omatonBuilderFactory]: Interpolants [259075#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 259074#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 259073#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 259072#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 259079#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 259078#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 259077#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 259076#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 259083#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 259082#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 259081#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 259080#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 259086#(<= main_~i~1 26), 259085#(<= main_~i~1 25), 259084#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 25), 259059#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 259058#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 259057#false, 259056#true, 259063#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 259062#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 259061#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 259060#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 259067#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 259066#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 259065#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 259064#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 259071#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 259070#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 259069#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 259068#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10))] [2018-04-13 00:11:49,472 INFO L134 CoverageAnalysis]: Checked inductivity of 481416 backedges. 57041 proven. 1850 refuted. 0 times theorem prover too weak. 422525 trivial. 0 not checked. [2018-04-13 00:11:49,472 INFO L442 AbstractCegarLoop]: Interpolant automaton has 31 states [2018-04-13 00:11:49,472 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2018-04-13 00:11:49,472 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=385, Invalid=545, Unknown=0, NotChecked=0, Total=930 [2018-04-13 00:11:49,472 INFO L87 Difference]: Start difference. First operand 594 states and 1055 transitions. Second operand 31 states. [2018-04-13 00:11:49,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:49,896 INFO L93 Difference]: Finished difference Result 837 states and 1757 transitions. [2018-04-13 00:11:49,896 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2018-04-13 00:11:49,897 INFO L78 Accepts]: Start accepts. Automaton has 31 states. Word has length 2713 [2018-04-13 00:11:49,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:49,902 INFO L225 Difference]: With dead ends: 837 [2018-04-13 00:11:49,902 INFO L226 Difference]: Without dead ends: 837 [2018-04-13 00:11:49,902 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 400 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=1139, Invalid=2053, Unknown=0, NotChecked=0, Total=3192 [2018-04-13 00:11:49,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 837 states. [2018-04-13 00:11:49,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 837 to 603. [2018-04-13 00:11:49,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 603 states. [2018-04-13 00:11:49,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1092 transitions. [2018-04-13 00:11:49,916 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1092 transitions. Word has length 2713 [2018-04-13 00:11:49,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:49,917 INFO L459 AbstractCegarLoop]: Abstraction has 603 states and 1092 transitions. [2018-04-13 00:11:49,917 INFO L460 AbstractCegarLoop]: Interpolant automaton has 31 states. [2018-04-13 00:11:49,917 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1092 transitions. [2018-04-13 00:11:49,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2720 [2018-04-13 00:11:49,945 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:49,945 INFO L355 BasicCegarLoop]: trace histogram [420, 390, 390, 390, 390, 390, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:49,945 INFO L408 AbstractCegarLoop]: === Iteration 204 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:49,946 INFO L82 PathProgramCache]: Analyzing trace with hash -1737126621, now seen corresponding path program 193 times [2018-04-13 00:11:49,946 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:50,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:50,086 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:52,301 INFO L134 CoverageAnalysis]: Checked inductivity of 483810 backedges. 9694 proven. 23839 refuted. 0 times theorem prover too weak. 450277 trivial. 0 not checked. [2018-04-13 00:11:52,301 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:52,301 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:11:52,301 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:52,302 INFO L134 CoverageAnalysis]: Checked inductivity of 23448 backedges. 567 proven. 1206 refuted. 0 times theorem prover too weak. 21675 trivial. 0 not checked. [2018-04-13 00:11:52,302 INFO L182 omatonBuilderFactory]: Interpolants [260610#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 13), 260609#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 260608#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 260579#true, 260583#(<= 2 main_~i~1), 260582#(<= 1 main_~i~1), 260581#(<= 0 main_~i~1), 260580#false, 260587#(<= 6 main_~i~1), 260586#(<= 5 main_~i~1), 260585#(<= 4 main_~i~1), 260584#(<= 3 main_~i~1), 260591#(<= 10 main_~i~1), 260590#(<= 9 main_~i~1), 260589#(<= 8 main_~i~1), 260588#(<= 7 main_~i~1), 260595#(<= 14 main_~i~1), 260594#(<= 13 main_~i~1), 260593#(<= 12 main_~i~1), 260592#(<= 11 main_~i~1), 260599#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 260598#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 260597#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 260596#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 260603#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 260602#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 260601#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 260600#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 260607#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 260606#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 260605#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 260604#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8))] [2018-04-13 00:11:52,310 INFO L134 CoverageAnalysis]: Checked inductivity of 483810 backedges. 9694 proven. 23839 refuted. 0 times theorem prover too weak. 450277 trivial. 0 not checked. [2018-04-13 00:11:52,310 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:11:52,310 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:11:52,310 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=257, Invalid=735, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:11:52,310 INFO L87 Difference]: Start difference. First operand 603 states and 1092 transitions. Second operand 32 states. [2018-04-13 00:11:52,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:52,728 INFO L93 Difference]: Finished difference Result 673 states and 1132 transitions. [2018-04-13 00:11:52,728 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2018-04-13 00:11:52,728 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2719 [2018-04-13 00:11:52,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:52,731 INFO L225 Difference]: With dead ends: 673 [2018-04-13 00:11:52,731 INFO L226 Difference]: Without dead ends: 673 [2018-04-13 00:11:52,731 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 510 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=495, Invalid=1575, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:11:52,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 673 states. [2018-04-13 00:11:52,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 673 to 603. [2018-04-13 00:11:52,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 603 states. [2018-04-13 00:11:52,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1076 transitions. [2018-04-13 00:11:52,740 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1076 transitions. Word has length 2719 [2018-04-13 00:11:52,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:52,741 INFO L459 AbstractCegarLoop]: Abstraction has 603 states and 1076 transitions. [2018-04-13 00:11:52,741 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:11:52,741 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1076 transitions. [2018-04-13 00:11:52,786 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2738 [2018-04-13 00:11:52,786 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:52,786 INFO L355 BasicCegarLoop]: trace histogram [423, 393, 393, 393, 393, 393, 31, 30, 30, 30, 30, 30, 30, 30, 30, 30, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:52,786 INFO L408 AbstractCegarLoop]: === Iteration 205 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:52,787 INFO L82 PathProgramCache]: Analyzing trace with hash 176566075, now seen corresponding path program 194 times [2018-04-13 00:11:52,787 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:52,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:52,919 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:55,154 INFO L134 CoverageAnalysis]: Checked inductivity of 491028 backedges. 0 proven. 2670 refuted. 0 times theorem prover too weak. 488358 trivial. 0 not checked. [2018-04-13 00:11:55,154 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:55,154 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [33] total 33 [2018-04-13 00:11:55,154 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:55,155 INFO L134 CoverageAnalysis]: Checked inductivity of 23700 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 23700 trivial. 0 not checked. [2018-04-13 00:11:55,155 INFO L182 omatonBuilderFactory]: Interpolants [261915#true, 261919#(<= main_~i~1 2), 261918#(<= main_~i~1 1), 261917#(= main_~i~1 0), 261916#false, 261923#(<= main_~i~1 6), 261922#(<= main_~i~1 5), 261921#(<= main_~i~1 4), 261920#(<= main_~i~1 3), 261927#(<= main_~i~1 10), 261926#(<= main_~i~1 9), 261925#(<= main_~i~1 8), 261924#(<= main_~i~1 7), 261931#(<= main_~i~1 14), 261930#(<= main_~i~1 13), 261929#(<= main_~i~1 12), 261928#(<= main_~i~1 11), 261935#(<= main_~i~1 18), 261934#(<= main_~i~1 17), 261933#(<= main_~i~1 16), 261932#(<= main_~i~1 15), 261939#(<= main_~i~1 22), 261938#(<= main_~i~1 21), 261937#(<= main_~i~1 20), 261936#(<= main_~i~1 19), 261943#(<= main_~i~1 26), 261942#(<= main_~i~1 25), 261941#(<= main_~i~1 24), 261940#(<= main_~i~1 23), 261947#(<= main_~i~1 30), 261946#(<= main_~i~1 29), 261945#(<= main_~i~1 28), 261944#(<= main_~i~1 27)] [2018-04-13 00:11:55,162 INFO L134 CoverageAnalysis]: Checked inductivity of 491028 backedges. 0 proven. 2670 refuted. 0 times theorem prover too weak. 488358 trivial. 0 not checked. [2018-04-13 00:11:55,162 INFO L442 AbstractCegarLoop]: Interpolant automaton has 33 states [2018-04-13 00:11:55,162 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2018-04-13 00:11:55,162 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=528, Invalid=528, Unknown=0, NotChecked=0, Total=1056 [2018-04-13 00:11:55,162 INFO L87 Difference]: Start difference. First operand 603 states and 1076 transitions. Second operand 33 states. [2018-04-13 00:11:55,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:55,400 INFO L93 Difference]: Finished difference Result 1336 states and 2950 transitions. [2018-04-13 00:11:55,400 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2018-04-13 00:11:55,400 INFO L78 Accepts]: Start accepts. Automaton has 33 states. Word has length 2737 [2018-04-13 00:11:55,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:55,407 INFO L225 Difference]: With dead ends: 1336 [2018-04-13 00:11:55,407 INFO L226 Difference]: Without dead ends: 1336 [2018-04-13 00:11:55,407 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=528, Invalid=528, Unknown=0, NotChecked=0, Total=1056 [2018-04-13 00:11:55,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1336 states. [2018-04-13 00:11:55,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1336 to 614. [2018-04-13 00:11:55,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:11:55,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:11:55,427 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2737 [2018-04-13 00:11:55,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:55,428 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:11:55,428 INFO L460 AbstractCegarLoop]: Interpolant automaton has 33 states. [2018-04-13 00:11:55,428 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:11:55,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2834 [2018-04-13 00:11:55,457 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:55,457 INFO L355 BasicCegarLoop]: trace histogram [438, 407, 407, 407, 407, 407, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:55,457 INFO L408 AbstractCegarLoop]: === Iteration 206 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:55,458 INFO L82 PathProgramCache]: Analyzing trace with hash -691463060, now seen corresponding path program 195 times [2018-04-13 00:11:55,458 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:55,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:55,592 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:11:58,033 INFO L134 CoverageAnalysis]: Checked inductivity of 526602 backedges. 14654 proven. 22570 refuted. 0 times theorem prover too weak. 489378 trivial. 0 not checked. [2018-04-13 00:11:58,033 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:11:58,033 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:11:58,033 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:11:58,034 INFO L134 CoverageAnalysis]: Checked inductivity of 25680 backedges. 920 proven. 1032 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:11:58,034 INFO L182 omatonBuilderFactory]: Interpolants [263900#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 263901#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 263902#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 263903#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 263898#true, 263899#false, 263908#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 263909#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 263910#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 263911#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 263904#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 263905#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 263906#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 263907#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 263916#(<= main_~i~1 14), 263917#(<= main_~i~1 15), 263918#(<= main_~i~1 16), 263919#(<= main_~i~1 17), 263912#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 263913#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 263914#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 263915#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 263924#(<= main_~i~1 22), 263925#(<= main_~i~1 23), 263926#(<= main_~i~1 24), 263927#(<= main_~i~1 25), 263920#(<= main_~i~1 18), 263921#(<= main_~i~1 19), 263922#(<= main_~i~1 20), 263923#(<= main_~i~1 21), 263928#(<= main_~i~1 26), 263929#(<= main_~i~1 27)] [2018-04-13 00:11:58,043 INFO L134 CoverageAnalysis]: Checked inductivity of 526602 backedges. 14654 proven. 22570 refuted. 0 times theorem prover too weak. 489378 trivial. 0 not checked. [2018-04-13 00:11:58,043 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:11:58,043 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:11:58,043 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=257, Invalid=735, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:11:58,043 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:11:58,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:11:58,558 INFO L93 Difference]: Finished difference Result 2040 states and 5659 transitions. [2018-04-13 00:11:58,558 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2018-04-13 00:11:58,558 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2833 [2018-04-13 00:11:58,559 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:11:58,574 INFO L225 Difference]: With dead ends: 2040 [2018-04-13 00:11:58,574 INFO L226 Difference]: Without dead ends: 2040 [2018-04-13 00:11:58,575 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 315 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=527, Invalid=1635, Unknown=0, NotChecked=0, Total=2162 [2018-04-13 00:11:58,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2040 states. [2018-04-13 00:11:58,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2040 to 614. [2018-04-13 00:11:58,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:11:58,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:11:58,619 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2833 [2018-04-13 00:11:58,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:11:58,620 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:11:58,620 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:11:58,620 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:11:58,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2840 [2018-04-13 00:11:58,649 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:11:58,649 INFO L355 BasicCegarLoop]: trace histogram [439, 408, 408, 408, 408, 408, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:11:58,649 INFO L408 AbstractCegarLoop]: === Iteration 207 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:11:58,650 INFO L82 PathProgramCache]: Analyzing trace with hash -1300485068, now seen corresponding path program 196 times [2018-04-13 00:11:58,650 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:11:58,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:11:58,791 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:01,246 INFO L134 CoverageAnalysis]: Checked inductivity of 529106 backedges. 16945 proven. 22671 refuted. 0 times theorem prover too weak. 489490 trivial. 0 not checked. [2018-04-13 00:12:01,247 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:01,247 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:01,247 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:01,248 INFO L134 CoverageAnalysis]: Checked inductivity of 25743 backedges. 1003 proven. 1012 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:01,248 INFO L182 omatonBuilderFactory]: Interpolants [266628#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 266629#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 266630#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 266631#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 266624#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 266625#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 266626#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 266627#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 266636#(<= main_~i~1 18), 266637#(<= main_~i~1 19), 266638#(<= main_~i~1 20), 266639#(<= main_~i~1 21), 266632#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 266633#(<= main_~i~1 15), 266634#(<= main_~i~1 16), 266635#(<= main_~i~1 17), 266644#(<= main_~i~1 26), 266645#(<= main_~i~1 27), 266640#(<= main_~i~1 22), 266641#(<= main_~i~1 23), 266642#(<= main_~i~1 24), 266643#(<= main_~i~1 25), 266614#true, 266615#false, 266620#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 266621#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 266622#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 266623#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 266616#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 266617#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 266618#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 266619#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3))] [2018-04-13 00:12:01,257 INFO L134 CoverageAnalysis]: Checked inductivity of 529106 backedges. 16945 proven. 22671 refuted. 0 times theorem prover too weak. 489490 trivial. 0 not checked. [2018-04-13 00:12:01,257 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:01,257 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:01,257 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=259, Invalid=733, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:01,257 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:02,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:02,064 INFO L93 Difference]: Finished difference Result 2007 states and 5562 transitions. [2018-04-13 00:12:02,064 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:12:02,064 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2839 [2018-04-13 00:12:02,065 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:02,081 INFO L225 Difference]: With dead ends: 2007 [2018-04-13 00:12:02,081 INFO L226 Difference]: Without dead ends: 2007 [2018-04-13 00:12:02,081 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=563, Invalid=1693, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:12:02,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2007 states. [2018-04-13 00:12:02,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2007 to 614. [2018-04-13 00:12:02,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:02,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:02,127 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2839 [2018-04-13 00:12:02,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:02,128 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:02,128 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:02,128 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:02,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2846 [2018-04-13 00:12:02,160 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:02,161 INFO L355 BasicCegarLoop]: trace histogram [440, 409, 409, 409, 409, 409, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:02,161 INFO L408 AbstractCegarLoop]: === Iteration 208 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:02,161 INFO L82 PathProgramCache]: Analyzing trace with hash 704986428, now seen corresponding path program 197 times [2018-04-13 00:12:02,161 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:02,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:02,311 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:04,726 INFO L134 CoverageAnalysis]: Checked inductivity of 531616 backedges. 19506 proven. 22502 refuted. 0 times theorem prover too weak. 489608 trivial. 0 not checked. [2018-04-13 00:12:04,726 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:04,726 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:04,726 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:04,727 INFO L134 CoverageAnalysis]: Checked inductivity of 25809 backedges. 1101 proven. 980 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:04,727 INFO L182 omatonBuilderFactory]: Interpolants [269316#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 269317#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 269318#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16), 269319#(<= main_~i~1 16), 269312#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 269313#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 269314#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 269315#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 269324#(<= main_~i~1 21), 269325#(<= main_~i~1 22), 269326#(<= main_~i~1 23), 269327#(<= main_~i~1 24), 269320#(<= main_~i~1 17), 269321#(<= main_~i~1 18), 269322#(<= main_~i~1 19), 269323#(<= main_~i~1 20), 269328#(<= main_~i~1 25), 269329#(<= main_~i~1 26), 269330#(<= main_~i~1 27), 269300#false, 269301#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 269302#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 269303#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 269299#true, 269308#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 269309#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 269310#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 269311#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 269304#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 269305#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 269306#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 269307#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6))] [2018-04-13 00:12:04,736 INFO L134 CoverageAnalysis]: Checked inductivity of 531616 backedges. 19506 proven. 22502 refuted. 0 times theorem prover too weak. 489608 trivial. 0 not checked. [2018-04-13 00:12:04,736 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:04,737 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:04,737 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=263, Invalid=729, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:04,737 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:05,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:05,201 INFO L93 Difference]: Finished difference Result 1962 states and 5427 transitions. [2018-04-13 00:12:05,202 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2018-04-13 00:12:05,202 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2845 [2018-04-13 00:12:05,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:05,217 INFO L225 Difference]: With dead ends: 1962 [2018-04-13 00:12:05,217 INFO L226 Difference]: Without dead ends: 1962 [2018-04-13 00:12:05,217 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 344 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=603, Invalid=1749, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:12:05,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1962 states. [2018-04-13 00:12:05,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1962 to 614. [2018-04-13 00:12:05,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:05,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:05,259 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2845 [2018-04-13 00:12:05,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:05,260 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:05,260 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:05,260 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:05,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2852 [2018-04-13 00:12:05,290 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:05,290 INFO L355 BasicCegarLoop]: trace histogram [441, 410, 410, 410, 410, 410, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:05,290 INFO L408 AbstractCegarLoop]: === Iteration 209 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:05,290 INFO L82 PathProgramCache]: Analyzing trace with hash -598749308, now seen corresponding path program 198 times [2018-04-13 00:12:05,291 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:05,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:05,454 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:07,904 INFO L134 CoverageAnalysis]: Checked inductivity of 534132 backedges. 22355 proven. 22045 refuted. 0 times theorem prover too weak. 489732 trivial. 0 not checked. [2018-04-13 00:12:07,905 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:07,905 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:07,905 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:07,906 INFO L134 CoverageAnalysis]: Checked inductivity of 25869 backedges. 1205 proven. 936 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:07,906 INFO L182 omatonBuilderFactory]: Interpolants [271941#true, 271942#false, 271943#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 271948#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 271949#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 271950#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 271951#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 271944#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 271945#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 271946#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 271947#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 271956#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 271957#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 271958#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 271959#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 271952#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 271953#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 271954#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 271955#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 271964#(<= main_~i~1 19), 271965#(<= main_~i~1 20), 271966#(<= main_~i~1 21), 271967#(<= main_~i~1 22), 271960#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 271961#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 271962#(<= main_~i~1 17), 271963#(<= main_~i~1 18), 271972#(<= main_~i~1 27), 271968#(<= main_~i~1 23), 271969#(<= main_~i~1 24), 271970#(<= main_~i~1 25), 271971#(<= main_~i~1 26)] [2018-04-13 00:12:07,914 INFO L134 CoverageAnalysis]: Checked inductivity of 534132 backedges. 22355 proven. 22045 refuted. 0 times theorem prover too weak. 489732 trivial. 0 not checked. [2018-04-13 00:12:07,914 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:07,915 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:07,915 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=269, Invalid=723, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:07,915 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:08,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:08,446 INFO L93 Difference]: Finished difference Result 1905 states and 5253 transitions. [2018-04-13 00:12:08,446 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2018-04-13 00:12:08,446 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2851 [2018-04-13 00:12:08,447 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:08,461 INFO L225 Difference]: With dead ends: 1905 [2018-04-13 00:12:08,461 INFO L226 Difference]: Without dead ends: 1905 [2018-04-13 00:12:08,461 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 357 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=647, Invalid=1803, Unknown=0, NotChecked=0, Total=2450 [2018-04-13 00:12:08,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1905 states. [2018-04-13 00:12:08,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1905 to 614. [2018-04-13 00:12:08,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:08,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:08,500 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2851 [2018-04-13 00:12:08,500 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:08,500 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:08,500 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:08,500 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:08,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2858 [2018-04-13 00:12:08,530 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:08,530 INFO L355 BasicCegarLoop]: trace histogram [442, 411, 411, 411, 411, 411, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:08,530 INFO L408 AbstractCegarLoop]: === Iteration 210 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:08,531 INFO L82 PathProgramCache]: Analyzing trace with hash -1900162292, now seen corresponding path program 199 times [2018-04-13 00:12:08,531 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:08,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:08,671 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:11,187 INFO L134 CoverageAnalysis]: Checked inductivity of 536654 backedges. 25510 proven. 21282 refuted. 0 times theorem prover too weak. 489862 trivial. 0 not checked. [2018-04-13 00:12:11,188 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:11,188 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:11,188 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:11,189 INFO L134 CoverageAnalysis]: Checked inductivity of 25923 backedges. 1315 proven. 880 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:11,189 INFO L182 omatonBuilderFactory]: Interpolants [274532#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 274533#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 274534#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 274535#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 274528#true, 274529#false, 274530#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 274531#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 274540#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 274541#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 274542#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 274543#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 274536#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 274537#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 274538#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 274539#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 274548#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 274549#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 274550#(<= main_~i~1 18), 274551#(<= main_~i~1 19), 274544#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 274545#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 274546#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 274547#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 274556#(<= main_~i~1 24), 274557#(<= main_~i~1 25), 274558#(<= main_~i~1 26), 274559#(<= main_~i~1 27), 274552#(<= main_~i~1 20), 274553#(<= main_~i~1 21), 274554#(<= main_~i~1 22), 274555#(<= main_~i~1 23)] [2018-04-13 00:12:11,198 INFO L134 CoverageAnalysis]: Checked inductivity of 536654 backedges. 25510 proven. 21282 refuted. 0 times theorem prover too weak. 489862 trivial. 0 not checked. [2018-04-13 00:12:11,198 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:11,198 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:11,198 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=277, Invalid=715, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:11,198 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:11,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:11,700 INFO L93 Difference]: Finished difference Result 1836 states and 5039 transitions. [2018-04-13 00:12:11,700 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2018-04-13 00:12:11,700 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2857 [2018-04-13 00:12:11,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:11,713 INFO L225 Difference]: With dead ends: 1836 [2018-04-13 00:12:11,714 INFO L226 Difference]: Without dead ends: 1836 [2018-04-13 00:12:11,714 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 369 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=695, Invalid=1855, Unknown=0, NotChecked=0, Total=2550 [2018-04-13 00:12:11,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1836 states. [2018-04-13 00:12:11,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1836 to 614. [2018-04-13 00:12:11,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:11,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:11,748 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2857 [2018-04-13 00:12:11,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:11,748 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:11,748 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:11,749 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:11,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2864 [2018-04-13 00:12:11,778 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:11,778 INFO L355 BasicCegarLoop]: trace histogram [443, 412, 412, 412, 412, 412, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:11,778 INFO L408 AbstractCegarLoop]: === Iteration 211 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:11,779 INFO L82 PathProgramCache]: Analyzing trace with hash 214673364, now seen corresponding path program 200 times [2018-04-13 00:12:11,779 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:11,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:11,911 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:14,418 INFO L134 CoverageAnalysis]: Checked inductivity of 539182 backedges. 28989 proven. 20195 refuted. 0 times theorem prover too weak. 489998 trivial. 0 not checked. [2018-04-13 00:12:14,419 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:14,419 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:14,419 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:14,420 INFO L134 CoverageAnalysis]: Checked inductivity of 25971 backedges. 1431 proven. 812 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:14,420 INFO L182 omatonBuilderFactory]: Interpolants [277060#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 277061#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 277062#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 277063#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 277056#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 277057#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 277058#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 277059#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 277068#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 277069#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 277070#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 277071#(<= main_~i~1 19), 277064#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 277065#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 277066#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 277067#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 277076#(<= main_~i~1 24), 277077#(<= main_~i~1 25), 277078#(<= main_~i~1 26), 277079#(<= main_~i~1 27), 277072#(<= main_~i~1 20), 277073#(<= main_~i~1 21), 277074#(<= main_~i~1 22), 277075#(<= main_~i~1 23), 277052#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 277053#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 277054#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 277055#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 277048#true, 277049#false, 277050#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 277051#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:12:14,429 INFO L134 CoverageAnalysis]: Checked inductivity of 539182 backedges. 28989 proven. 20195 refuted. 0 times theorem prover too weak. 489998 trivial. 0 not checked. [2018-04-13 00:12:14,429 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:14,429 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:14,429 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=287, Invalid=705, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:14,430 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:14,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:14,970 INFO L93 Difference]: Finished difference Result 1755 states and 4784 transitions. [2018-04-13 00:12:14,970 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2018-04-13 00:12:14,971 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2863 [2018-04-13 00:12:14,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:14,985 INFO L225 Difference]: With dead ends: 1755 [2018-04-13 00:12:14,985 INFO L226 Difference]: Without dead ends: 1755 [2018-04-13 00:12:14,985 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 380 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=747, Invalid=1905, Unknown=0, NotChecked=0, Total=2652 [2018-04-13 00:12:14,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1755 states. [2018-04-13 00:12:15,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1755 to 614. [2018-04-13 00:12:15,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:15,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:15,020 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2863 [2018-04-13 00:12:15,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:15,021 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:15,021 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:15,021 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:15,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2870 [2018-04-13 00:12:15,053 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:15,053 INFO L355 BasicCegarLoop]: trace histogram [444, 413, 413, 413, 413, 413, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:15,053 INFO L408 AbstractCegarLoop]: === Iteration 212 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:15,053 INFO L82 PathProgramCache]: Analyzing trace with hash 544218588, now seen corresponding path program 201 times [2018-04-13 00:12:15,054 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:15,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:15,198 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:17,739 INFO L134 CoverageAnalysis]: Checked inductivity of 541716 backedges. 32810 proven. 18766 refuted. 0 times theorem prover too weak. 490140 trivial. 0 not checked. [2018-04-13 00:12:17,739 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:17,739 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:17,739 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:17,740 INFO L134 CoverageAnalysis]: Checked inductivity of 26013 backedges. 1553 proven. 732 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:17,740 INFO L182 omatonBuilderFactory]: Interpolants [279492#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 279493#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 279494#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 279495#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 279489#true, 279490#false, 279491#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 279500#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 279501#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 279502#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 279503#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 279496#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 279497#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 279498#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 279499#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 279508#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 279509#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 279510#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 279511#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 279504#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 279505#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 279506#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 279507#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 279516#(<= main_~i~1 23), 279517#(<= main_~i~1 24), 279518#(<= main_~i~1 25), 279519#(<= main_~i~1 26), 279512#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20), 279513#(<= main_~i~1 20), 279514#(<= main_~i~1 21), 279515#(<= main_~i~1 22), 279520#(<= main_~i~1 27)] [2018-04-13 00:12:17,749 INFO L134 CoverageAnalysis]: Checked inductivity of 541716 backedges. 32810 proven. 18766 refuted. 0 times theorem prover too weak. 490140 trivial. 0 not checked. [2018-04-13 00:12:17,749 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:17,749 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:17,749 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=299, Invalid=693, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:17,749 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:18,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:18,328 INFO L93 Difference]: Finished difference Result 1662 states and 4487 transitions. [2018-04-13 00:12:18,328 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2018-04-13 00:12:18,328 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2869 [2018-04-13 00:12:18,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:18,341 INFO L225 Difference]: With dead ends: 1662 [2018-04-13 00:12:18,341 INFO L226 Difference]: Without dead ends: 1662 [2018-04-13 00:12:18,341 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 390 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=803, Invalid=1953, Unknown=0, NotChecked=0, Total=2756 [2018-04-13 00:12:18,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1662 states. [2018-04-13 00:12:18,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1662 to 614. [2018-04-13 00:12:18,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:18,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:18,374 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2869 [2018-04-13 00:12:18,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:18,375 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:18,376 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:18,376 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:18,407 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2876 [2018-04-13 00:12:18,407 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:18,407 INFO L355 BasicCegarLoop]: trace histogram [445, 414, 414, 414, 414, 414, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:18,407 INFO L408 AbstractCegarLoop]: === Iteration 213 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:18,407 INFO L82 PathProgramCache]: Analyzing trace with hash 1228436772, now seen corresponding path program 202 times [2018-04-13 00:12:18,408 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:18,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:18,553 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:21,155 INFO L134 CoverageAnalysis]: Checked inductivity of 544256 backedges. 36991 proven. 16977 refuted. 0 times theorem prover too weak. 490288 trivial. 0 not checked. [2018-04-13 00:12:21,156 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:21,156 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:21,156 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:21,157 INFO L134 CoverageAnalysis]: Checked inductivity of 26049 backedges. 1681 proven. 640 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:21,157 INFO L182 omatonBuilderFactory]: Interpolants [281860#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 281861#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 281862#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 281863#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21), 281856#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 281857#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 281858#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 281859#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 281868#(<= main_~i~1 25), 281869#(<= main_~i~1 26), 281870#(<= main_~i~1 27), 281864#(<= main_~i~1 21), 281865#(<= main_~i~1 22), 281866#(<= main_~i~1 23), 281867#(<= main_~i~1 24), 281839#true, 281844#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 281845#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 281846#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 281847#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 281840#false, 281841#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 281842#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 281843#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 281852#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 281853#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 281854#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 281855#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 281848#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 281849#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 281850#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 281851#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10))] [2018-04-13 00:12:21,166 INFO L134 CoverageAnalysis]: Checked inductivity of 544256 backedges. 36991 proven. 16977 refuted. 0 times theorem prover too weak. 490288 trivial. 0 not checked. [2018-04-13 00:12:21,166 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:21,166 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:21,166 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=313, Invalid=679, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:21,167 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:21,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:21,667 INFO L93 Difference]: Finished difference Result 1557 states and 4147 transitions. [2018-04-13 00:12:21,668 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2018-04-13 00:12:21,668 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2875 [2018-04-13 00:12:21,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:21,678 INFO L225 Difference]: With dead ends: 1557 [2018-04-13 00:12:21,678 INFO L226 Difference]: Without dead ends: 1557 [2018-04-13 00:12:21,678 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 399 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=863, Invalid=1999, Unknown=0, NotChecked=0, Total=2862 [2018-04-13 00:12:21,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1557 states. [2018-04-13 00:12:21,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1557 to 614. [2018-04-13 00:12:21,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:21,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:21,706 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2875 [2018-04-13 00:12:21,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:21,707 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:21,707 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:21,707 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:21,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2882 [2018-04-13 00:12:21,736 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:21,736 INFO L355 BasicCegarLoop]: trace histogram [446, 415, 415, 415, 415, 415, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:21,736 INFO L408 AbstractCegarLoop]: === Iteration 214 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:21,736 INFO L82 PathProgramCache]: Analyzing trace with hash -1994367572, now seen corresponding path program 203 times [2018-04-13 00:12:21,737 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:21,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:21,875 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:24,420 INFO L134 CoverageAnalysis]: Checked inductivity of 546802 backedges. 41550 proven. 14810 refuted. 0 times theorem prover too weak. 490442 trivial. 0 not checked. [2018-04-13 00:12:24,420 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:24,421 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:24,421 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:24,422 INFO L134 CoverageAnalysis]: Checked inductivity of 26079 backedges. 1815 proven. 536 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:24,422 INFO L182 omatonBuilderFactory]: Interpolants [284100#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 284101#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 284102#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 284103#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 284096#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 284097#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 284098#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 284099#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 284108#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 284109#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 284110#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 284111#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 22), 284104#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 284105#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 284106#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 284107#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 284116#(<= main_~i~1 26), 284117#(<= main_~i~1 27), 284112#(<= main_~i~1 22), 284113#(<= main_~i~1 23), 284114#(<= main_~i~1 24), 284115#(<= main_~i~1 25), 284086#true, 284087#false, 284092#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 284093#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 284094#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 284095#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 284088#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 284089#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 284090#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 284091#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3))] [2018-04-13 00:12:24,431 INFO L134 CoverageAnalysis]: Checked inductivity of 546802 backedges. 41550 proven. 14810 refuted. 0 times theorem prover too weak. 490442 trivial. 0 not checked. [2018-04-13 00:12:24,431 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:24,431 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:24,431 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=329, Invalid=663, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:24,432 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:24,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:24,948 INFO L93 Difference]: Finished difference Result 1440 states and 3763 transitions. [2018-04-13 00:12:24,948 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2018-04-13 00:12:24,948 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2881 [2018-04-13 00:12:24,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:24,958 INFO L225 Difference]: With dead ends: 1440 [2018-04-13 00:12:24,958 INFO L226 Difference]: Without dead ends: 1440 [2018-04-13 00:12:24,958 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 407 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=927, Invalid=2043, Unknown=0, NotChecked=0, Total=2970 [2018-04-13 00:12:24,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1440 states. [2018-04-13 00:12:24,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1440 to 614. [2018-04-13 00:12:24,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:24,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:24,985 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2881 [2018-04-13 00:12:24,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:24,986 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:24,986 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:24,986 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:25,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2888 [2018-04-13 00:12:25,017 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:25,017 INFO L355 BasicCegarLoop]: trace histogram [447, 416, 416, 416, 416, 416, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:25,017 INFO L408 AbstractCegarLoop]: === Iteration 215 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:25,017 INFO L82 PathProgramCache]: Analyzing trace with hash -1893337228, now seen corresponding path program 204 times [2018-04-13 00:12:25,017 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:25,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:25,159 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:27,723 INFO L134 CoverageAnalysis]: Checked inductivity of 549354 backedges. 46505 proven. 12247 refuted. 0 times theorem prover too weak. 490602 trivial. 0 not checked. [2018-04-13 00:12:27,723 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:27,723 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:27,723 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:27,724 INFO L134 CoverageAnalysis]: Checked inductivity of 26103 backedges. 1955 proven. 420 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:27,724 INFO L182 omatonBuilderFactory]: Interpolants [286220#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 286221#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 286222#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 286223#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 286218#true, 286219#false, 286228#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 286229#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 286230#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 286231#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 286224#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 286225#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 286226#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 286227#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 286236#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 286237#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 286238#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 286239#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 286232#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 286233#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 286234#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 286235#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 286244#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 23), 286245#(<= main_~i~1 23), 286246#(<= main_~i~1 24), 286247#(<= main_~i~1 25), 286240#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 286241#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 286242#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 286243#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 286248#(<= main_~i~1 26), 286249#(<= main_~i~1 27)] [2018-04-13 00:12:27,734 INFO L134 CoverageAnalysis]: Checked inductivity of 549354 backedges. 46505 proven. 12247 refuted. 0 times theorem prover too weak. 490602 trivial. 0 not checked. [2018-04-13 00:12:27,734 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:27,734 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:27,734 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=347, Invalid=645, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:27,734 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:28,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:28,288 INFO L93 Difference]: Finished difference Result 1311 states and 3334 transitions. [2018-04-13 00:12:28,288 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2018-04-13 00:12:28,289 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2887 [2018-04-13 00:12:28,290 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:28,297 INFO L225 Difference]: With dead ends: 1311 [2018-04-13 00:12:28,297 INFO L226 Difference]: Without dead ends: 1311 [2018-04-13 00:12:28,297 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 414 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=995, Invalid=2085, Unknown=0, NotChecked=0, Total=3080 [2018-04-13 00:12:28,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1311 states. [2018-04-13 00:12:28,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1311 to 614. [2018-04-13 00:12:28,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:28,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:28,319 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2887 [2018-04-13 00:12:28,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:28,319 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:28,319 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:28,320 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:28,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2894 [2018-04-13 00:12:28,349 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:28,349 INFO L355 BasicCegarLoop]: trace histogram [448, 417, 417, 417, 417, 417, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:28,349 INFO L408 AbstractCegarLoop]: === Iteration 216 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:28,349 INFO L82 PathProgramCache]: Analyzing trace with hash -124136836, now seen corresponding path program 205 times [2018-04-13 00:12:28,350 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:28,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:28,486 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:31,156 INFO L134 CoverageAnalysis]: Checked inductivity of 551912 backedges. 51874 proven. 9270 refuted. 0 times theorem prover too weak. 490768 trivial. 0 not checked. [2018-04-13 00:12:31,156 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:31,156 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:31,157 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:31,157 INFO L134 CoverageAnalysis]: Checked inductivity of 26121 backedges. 2101 proven. 292 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:31,158 INFO L182 omatonBuilderFactory]: Interpolants [288223#true, 288228#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 288229#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 288230#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 288231#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 288224#false, 288225#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 288226#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 288227#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 288236#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 288237#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 288238#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 288239#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 288232#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 288233#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 288234#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 288235#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 288244#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 288245#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 288246#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 288247#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 288240#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 288241#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 288242#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 288243#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 288252#(<= main_~i~1 25), 288253#(<= main_~i~1 26), 288254#(<= main_~i~1 27), 288248#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 288249#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 288250#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 24), 288251#(<= main_~i~1 24)] [2018-04-13 00:12:31,167 INFO L134 CoverageAnalysis]: Checked inductivity of 551912 backedges. 51874 proven. 9270 refuted. 0 times theorem prover too weak. 490768 trivial. 0 not checked. [2018-04-13 00:12:31,167 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:31,167 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:31,167 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=367, Invalid=625, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:31,167 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:31,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:31,708 INFO L93 Difference]: Finished difference Result 1170 states and 2859 transitions. [2018-04-13 00:12:31,708 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2018-04-13 00:12:31,708 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2893 [2018-04-13 00:12:31,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:31,716 INFO L225 Difference]: With dead ends: 1170 [2018-04-13 00:12:31,716 INFO L226 Difference]: Without dead ends: 1170 [2018-04-13 00:12:31,717 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 420 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=1067, Invalid=2125, Unknown=0, NotChecked=0, Total=3192 [2018-04-13 00:12:31,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1170 states. [2018-04-13 00:12:31,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1170 to 614. [2018-04-13 00:12:31,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:31,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:31,738 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2893 [2018-04-13 00:12:31,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:31,739 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:31,739 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:31,739 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:31,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2900 [2018-04-13 00:12:31,770 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:31,770 INFO L355 BasicCegarLoop]: trace histogram [449, 418, 418, 418, 418, 418, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:31,770 INFO L408 AbstractCegarLoop]: === Iteration 217 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:31,770 INFO L82 PathProgramCache]: Analyzing trace with hash -1825902908, now seen corresponding path program 206 times [2018-04-13 00:12:31,771 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:31,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:31,919 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:36,603 INFO L134 CoverageAnalysis]: Checked inductivity of 554476 backedges. 57675 proven. 5861 refuted. 0 times theorem prover too weak. 490940 trivial. 0 not checked. [2018-04-13 00:12:36,603 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:36,603 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:36,603 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:36,604 INFO L134 CoverageAnalysis]: Checked inductivity of 26133 backedges. 2253 proven. 152 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:36,604 INFO L182 omatonBuilderFactory]: Interpolants [290116#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 290117#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 25), 290118#(<= main_~i~1 25), 290119#(<= main_~i~1 26), 290112#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 290113#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 290114#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 290115#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 290120#(<= main_~i~1 27), 290092#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 290093#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 290094#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 290095#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 290089#true, 290090#false, 290091#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 290100#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 290101#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 290102#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 290103#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 290096#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 290097#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 290098#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 290099#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 290108#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 290109#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 290110#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 290111#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 290104#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 290105#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 290106#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 290107#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16))] [2018-04-13 00:12:36,613 INFO L134 CoverageAnalysis]: Checked inductivity of 554476 backedges. 57675 proven. 5861 refuted. 0 times theorem prover too weak. 490940 trivial. 0 not checked. [2018-04-13 00:12:36,614 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:36,614 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:36,614 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=389, Invalid=603, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:36,614 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:37,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:37,087 INFO L93 Difference]: Finished difference Result 1021 states and 2341 transitions. [2018-04-13 00:12:37,087 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2018-04-13 00:12:37,087 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2899 [2018-04-13 00:12:37,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:37,094 INFO L225 Difference]: With dead ends: 1021 [2018-04-13 00:12:37,094 INFO L226 Difference]: Without dead ends: 1021 [2018-04-13 00:12:37,095 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 425 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=1143, Invalid=2163, Unknown=0, NotChecked=0, Total=3306 [2018-04-13 00:12:37,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1021 states. [2018-04-13 00:12:37,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1021 to 614. [2018-04-13 00:12:37,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-04-13 00:12:37,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 1101 transitions. [2018-04-13 00:12:37,112 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 1101 transitions. Word has length 2899 [2018-04-13 00:12:37,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:37,112 INFO L459 AbstractCegarLoop]: Abstraction has 614 states and 1101 transitions. [2018-04-13 00:12:37,112 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:37,112 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 1101 transitions. [2018-04-13 00:12:37,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2906 [2018-04-13 00:12:37,153 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:37,153 INFO L355 BasicCegarLoop]: trace histogram [450, 419, 419, 419, 419, 419, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:37,153 INFO L408 AbstractCegarLoop]: === Iteration 218 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:37,154 INFO L82 PathProgramCache]: Analyzing trace with hash -1162953652, now seen corresponding path program 207 times [2018-04-13 00:12:37,154 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:37,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:37,300 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:39,970 INFO L134 CoverageAnalysis]: Checked inductivity of 557046 backedges. 63926 proven. 2002 refuted. 0 times theorem prover too weak. 491118 trivial. 0 not checked. [2018-04-13 00:12:39,970 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:39,970 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [32] total 32 [2018-04-13 00:12:39,970 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:39,971 INFO L134 CoverageAnalysis]: Checked inductivity of 26139 backedges. 2411 proven. 0 refuted. 0 times theorem prover too weak. 23728 trivial. 0 not checked. [2018-04-13 00:12:39,971 INFO L182 omatonBuilderFactory]: Interpolants [291812#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 291813#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 291814#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 291815#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 291808#true, 291809#false, 291810#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 291811#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 291820#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 291821#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 291822#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 291823#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 291816#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 291817#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 291818#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 291819#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 291828#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 291829#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 291830#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 291831#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 291824#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 291825#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 291826#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 291827#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 291836#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 26)), 291837#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 26), 291838#(<= main_~i~1 26), 291839#(<= main_~i~1 27), 291832#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 291833#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 291834#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 291835#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25))] [2018-04-13 00:12:39,981 INFO L134 CoverageAnalysis]: Checked inductivity of 557046 backedges. 63926 proven. 2002 refuted. 0 times theorem prover too weak. 491118 trivial. 0 not checked. [2018-04-13 00:12:39,981 INFO L442 AbstractCegarLoop]: Interpolant automaton has 32 states [2018-04-13 00:12:39,982 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2018-04-13 00:12:39,982 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=413, Invalid=579, Unknown=0, NotChecked=0, Total=992 [2018-04-13 00:12:39,982 INFO L87 Difference]: Start difference. First operand 614 states and 1101 transitions. Second operand 32 states. [2018-04-13 00:12:40,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:40,444 INFO L93 Difference]: Finished difference Result 865 states and 1837 transitions. [2018-04-13 00:12:40,444 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2018-04-13 00:12:40,444 INFO L78 Accepts]: Start accepts. Automaton has 32 states. Word has length 2905 [2018-04-13 00:12:40,445 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:40,450 INFO L225 Difference]: With dead ends: 865 [2018-04-13 00:12:40,450 INFO L226 Difference]: Without dead ends: 865 [2018-04-13 00:12:40,451 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 429 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=1223, Invalid=2199, Unknown=0, NotChecked=0, Total=3422 [2018-04-13 00:12:40,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 865 states. [2018-04-13 00:12:40,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 865 to 623. [2018-04-13 00:12:40,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 623 states. [2018-04-13 00:12:40,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 623 states to 623 states and 1139 transitions. [2018-04-13 00:12:40,466 INFO L78 Accepts]: Start accepts. Automaton has 623 states and 1139 transitions. Word has length 2905 [2018-04-13 00:12:40,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:40,467 INFO L459 AbstractCegarLoop]: Abstraction has 623 states and 1139 transitions. [2018-04-13 00:12:40,467 INFO L460 AbstractCegarLoop]: Interpolant automaton has 32 states. [2018-04-13 00:12:40,467 INFO L276 IsEmpty]: Start isEmpty. Operand 623 states and 1139 transitions. [2018-04-13 00:12:40,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2912 [2018-04-13 00:12:40,500 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:40,500 INFO L355 BasicCegarLoop]: trace histogram [451, 420, 420, 420, 420, 420, 32, 31, 31, 31, 31, 31, 31, 31, 31, 31, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:40,500 INFO L408 AbstractCegarLoop]: === Iteration 219 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:40,500 INFO L82 PathProgramCache]: Analyzing trace with hash 1587878676, now seen corresponding path program 208 times [2018-04-13 00:12:40,501 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:40,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:40,655 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:43,079 INFO L134 CoverageAnalysis]: Checked inductivity of 559622 backedges. 0 proven. 2852 refuted. 0 times theorem prover too weak. 556770 trivial. 0 not checked. [2018-04-13 00:12:43,079 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:43,079 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [34] total 34 [2018-04-13 00:12:43,079 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:43,080 INFO L134 CoverageAnalysis]: Checked inductivity of 26136 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 26136 trivial. 0 not checked. [2018-04-13 00:12:43,080 INFO L182 omatonBuilderFactory]: Interpolants [293382#true, 293383#false, 293388#(<= main_~i~1 4), 293389#(<= main_~i~1 5), 293390#(<= main_~i~1 6), 293391#(<= main_~i~1 7), 293384#(= main_~i~1 0), 293385#(<= main_~i~1 1), 293386#(<= main_~i~1 2), 293387#(<= main_~i~1 3), 293396#(<= main_~i~1 12), 293397#(<= main_~i~1 13), 293398#(<= main_~i~1 14), 293399#(<= main_~i~1 15), 293392#(<= main_~i~1 8), 293393#(<= main_~i~1 9), 293394#(<= main_~i~1 10), 293395#(<= main_~i~1 11), 293404#(<= main_~i~1 20), 293405#(<= main_~i~1 21), 293406#(<= main_~i~1 22), 293407#(<= main_~i~1 23), 293400#(<= main_~i~1 16), 293401#(<= main_~i~1 17), 293402#(<= main_~i~1 18), 293403#(<= main_~i~1 19), 293412#(<= main_~i~1 28), 293413#(<= main_~i~1 29), 293414#(<= main_~i~1 30), 293415#(<= main_~i~1 31), 293408#(<= main_~i~1 24), 293409#(<= main_~i~1 25), 293410#(<= main_~i~1 26), 293411#(<= main_~i~1 27)] [2018-04-13 00:12:43,088 INFO L134 CoverageAnalysis]: Checked inductivity of 559622 backedges. 0 proven. 2852 refuted. 0 times theorem prover too weak. 556770 trivial. 0 not checked. [2018-04-13 00:12:43,088 INFO L442 AbstractCegarLoop]: Interpolant automaton has 34 states [2018-04-13 00:12:43,088 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2018-04-13 00:12:43,088 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=561, Invalid=561, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:12:43,089 INFO L87 Difference]: Start difference. First operand 623 states and 1139 transitions. Second operand 34 states. [2018-04-13 00:12:43,382 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:43,382 INFO L93 Difference]: Finished difference Result 1387 states and 3146 transitions. [2018-04-13 00:12:43,382 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2018-04-13 00:12:43,382 INFO L78 Accepts]: Start accepts. Automaton has 34 states. Word has length 2911 [2018-04-13 00:12:43,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:43,391 INFO L225 Difference]: With dead ends: 1387 [2018-04-13 00:12:43,391 INFO L226 Difference]: Without dead ends: 1387 [2018-04-13 00:12:43,391 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=561, Invalid=561, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:12:43,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1387 states. [2018-04-13 00:12:43,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1387 to 634. [2018-04-13 00:12:43,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:12:43,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1165 transitions. [2018-04-13 00:12:43,415 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1165 transitions. Word has length 2911 [2018-04-13 00:12:43,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:43,416 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1165 transitions. [2018-04-13 00:12:43,416 INFO L460 AbstractCegarLoop]: Interpolant automaton has 34 states. [2018-04-13 00:12:43,416 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1165 transitions. [2018-04-13 00:12:43,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3008 [2018-04-13 00:12:43,450 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:43,450 INFO L355 BasicCegarLoop]: trace histogram [466, 434, 434, 434, 434, 434, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:43,450 INFO L408 AbstractCegarLoop]: === Iteration 220 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:43,450 INFO L82 PathProgramCache]: Analyzing trace with hash 160074373, now seen corresponding path program 209 times [2018-04-13 00:12:43,451 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:43,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:43,609 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:46,394 INFO L134 CoverageAnalysis]: Checked inductivity of 597558 backedges. 11781 proven. 28192 refuted. 0 times theorem prover too weak. 557585 trivial. 0 not checked. [2018-04-13 00:12:46,394 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:46,394 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [34] total 34 [2018-04-13 00:12:46,394 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:46,395 INFO L134 CoverageAnalysis]: Checked inductivity of 28203 backedges. 653 proven. 1385 refuted. 0 times theorem prover too weak. 26165 trivial. 0 not checked. [2018-04-13 00:12:46,395 INFO L182 omatonBuilderFactory]: Interpolants [295437#true, 295438#false, 295439#(<= 0 main_~i~1), 295444#(<= 5 main_~i~1), 295445#(<= 6 main_~i~1), 295446#(<= 7 main_~i~1), 295447#(<= 8 main_~i~1), 295440#(<= 1 main_~i~1), 295441#(<= 2 main_~i~1), 295442#(<= 3 main_~i~1), 295443#(<= 4 main_~i~1), 295452#(<= 13 main_~i~1), 295453#(<= 14 main_~i~1), 295454#(<= 15 main_~i~1), 295455#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 295448#(<= 9 main_~i~1), 295449#(<= 10 main_~i~1), 295450#(<= 11 main_~i~1), 295451#(<= 12 main_~i~1), 295460#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 295461#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 295462#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 295463#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 295456#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 295457#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 295458#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 295459#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 295468#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 295469#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 295470#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 14), 295464#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 295465#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 295466#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 295467#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:12:46,405 INFO L134 CoverageAnalysis]: Checked inductivity of 597558 backedges. 11781 proven. 28192 refuted. 0 times theorem prover too weak. 557585 trivial. 0 not checked. [2018-04-13 00:12:46,405 INFO L442 AbstractCegarLoop]: Interpolant automaton has 34 states [2018-04-13 00:12:46,405 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2018-04-13 00:12:46,405 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=290, Invalid=832, Unknown=0, NotChecked=0, Total=1122 [2018-04-13 00:12:46,405 INFO L87 Difference]: Start difference. First operand 634 states and 1165 transitions. Second operand 34 states. [2018-04-13 00:12:47,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:47,111 INFO L93 Difference]: Finished difference Result 709 states and 1208 transitions. [2018-04-13 00:12:47,112 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2018-04-13 00:12:47,112 INFO L78 Accepts]: Start accepts. Automaton has 34 states. Word has length 3007 [2018-04-13 00:12:47,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:47,115 INFO L225 Difference]: With dead ends: 709 [2018-04-13 00:12:47,115 INFO L226 Difference]: Without dead ends: 709 [2018-04-13 00:12:47,115 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 584 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=560, Invalid=1792, Unknown=0, NotChecked=0, Total=2352 [2018-04-13 00:12:47,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 709 states. [2018-04-13 00:12:47,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 709 to 634. [2018-04-13 00:12:47,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:12:47,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1148 transitions. [2018-04-13 00:12:47,126 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1148 transitions. Word has length 3007 [2018-04-13 00:12:47,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:47,126 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1148 transitions. [2018-04-13 00:12:47,126 INFO L460 AbstractCegarLoop]: Interpolant automaton has 34 states. [2018-04-13 00:12:47,126 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1148 transitions. [2018-04-13 00:12:47,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3032 [2018-04-13 00:12:47,160 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:47,160 INFO L355 BasicCegarLoop]: trace histogram [470, 438, 438, 438, 438, 438, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:47,160 INFO L408 AbstractCegarLoop]: === Iteration 221 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:47,160 INFO L82 PathProgramCache]: Analyzing trace with hash -1887895003, now seen corresponding path program 210 times [2018-04-13 00:12:47,160 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:47,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:47,322 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:50,133 INFO L134 CoverageAnalysis]: Checked inductivity of 608266 backedges. 13950 proven. 29061 refuted. 0 times theorem prover too weak. 565255 trivial. 0 not checked. [2018-04-13 00:12:50,133 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:50,134 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [36] total 36 [2018-04-13 00:12:50,134 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:50,135 INFO L134 CoverageAnalysis]: Checked inductivity of 28551 backedges. 745 proven. 1389 refuted. 0 times theorem prover too weak. 26417 trivial. 0 not checked. [2018-04-13 00:12:50,135 INFO L182 omatonBuilderFactory]: Interpolants [296844#true, 296845#false, 296846#(<= 0 main_~i~1), 296847#(<= 1 main_~i~1), 296852#(<= 6 main_~i~1), 296853#(<= 7 main_~i~1), 296854#(<= 8 main_~i~1), 296855#(<= 9 main_~i~1), 296848#(<= 2 main_~i~1), 296849#(<= 3 main_~i~1), 296850#(<= 4 main_~i~1), 296851#(<= 5 main_~i~1), 296860#(<= 14 main_~i~1), 296861#(<= 15 main_~i~1), 296862#(<= 16 main_~i~1), 296863#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 296856#(<= 10 main_~i~1), 296857#(<= 11 main_~i~1), 296858#(<= 12 main_~i~1), 296859#(<= 13 main_~i~1), 296868#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 296869#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 296870#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 296871#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 296864#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 296865#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 296866#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 296867#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 296876#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 296877#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 296878#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 296879#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 15), 296872#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 296873#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 296874#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 296875#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12))] [2018-04-13 00:12:50,145 INFO L134 CoverageAnalysis]: Checked inductivity of 608266 backedges. 13950 proven. 29061 refuted. 0 times theorem prover too weak. 565255 trivial. 0 not checked. [2018-04-13 00:12:50,145 INFO L442 AbstractCegarLoop]: Interpolant automaton has 36 states [2018-04-13 00:12:50,145 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2018-04-13 00:12:50,145 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=935, Unknown=0, NotChecked=0, Total=1260 [2018-04-13 00:12:50,145 INFO L87 Difference]: Start difference. First operand 634 states and 1148 transitions. Second operand 36 states. [2018-04-13 00:12:50,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:50,925 INFO L93 Difference]: Finished difference Result 714 states and 1196 transitions. [2018-04-13 00:12:50,925 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2018-04-13 00:12:50,925 INFO L78 Accepts]: Start accepts. Automaton has 36 states. Word has length 3031 [2018-04-13 00:12:50,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:50,928 INFO L225 Difference]: With dead ends: 714 [2018-04-13 00:12:50,928 INFO L226 Difference]: Without dead ends: 714 [2018-04-13 00:12:50,928 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 663 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=629, Invalid=2023, Unknown=0, NotChecked=0, Total=2652 [2018-04-13 00:12:50,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 714 states. [2018-04-13 00:12:50,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 714 to 634. [2018-04-13 00:12:50,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:12:50,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1132 transitions. [2018-04-13 00:12:50,937 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1132 transitions. Word has length 3031 [2018-04-13 00:12:50,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:50,937 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1132 transitions. [2018-04-13 00:12:50,937 INFO L460 AbstractCegarLoop]: Interpolant automaton has 36 states. [2018-04-13 00:12:50,937 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1132 transitions. [2018-04-13 00:12:50,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3056 [2018-04-13 00:12:50,971 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:50,971 INFO L355 BasicCegarLoop]: trace histogram [474, 442, 442, 442, 442, 442, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:50,971 INFO L408 AbstractCegarLoop]: === Iteration 222 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:50,972 INFO L82 PathProgramCache]: Analyzing trace with hash 1678038725, now seen corresponding path program 211 times [2018-04-13 00:12:50,972 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:51,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:51,126 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:53,985 INFO L134 CoverageAnalysis]: Checked inductivity of 619070 backedges. 16395 proven. 29690 refuted. 0 times theorem prover too weak. 572985 trivial. 0 not checked. [2018-04-13 00:12:53,986 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:53,986 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [38] total 38 [2018-04-13 00:12:53,986 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:53,987 INFO L134 CoverageAnalysis]: Checked inductivity of 28875 backedges. 843 proven. 1381 refuted. 0 times theorem prover too weak. 26651 trivial. 0 not checked. [2018-04-13 00:12:53,987 INFO L182 omatonBuilderFactory]: Interpolants [298260#true, 298261#false, 298262#(<= 0 main_~i~1), 298263#(<= 1 main_~i~1), 298268#(<= 6 main_~i~1), 298269#(<= 7 main_~i~1), 298270#(<= 8 main_~i~1), 298271#(<= 9 main_~i~1), 298264#(<= 2 main_~i~1), 298265#(<= 3 main_~i~1), 298266#(<= 4 main_~i~1), 298267#(<= 5 main_~i~1), 298276#(<= 14 main_~i~1), 298277#(<= 15 main_~i~1), 298278#(<= 16 main_~i~1), 298279#(<= 17 main_~i~1), 298272#(<= 10 main_~i~1), 298273#(<= 11 main_~i~1), 298274#(<= 12 main_~i~1), 298275#(<= 13 main_~i~1), 298284#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 298285#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 298286#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 298287#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 298280#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 298281#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 298282#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 298283#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 298292#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 298293#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 298294#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 298295#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 298288#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 298289#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 298290#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 298291#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 298296#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 298297#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 16)] [2018-04-13 00:12:53,997 INFO L134 CoverageAnalysis]: Checked inductivity of 619070 backedges. 16395 proven. 29690 refuted. 0 times theorem prover too weak. 572985 trivial. 0 not checked. [2018-04-13 00:12:53,997 INFO L442 AbstractCegarLoop]: Interpolant automaton has 38 states [2018-04-13 00:12:53,997 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2018-04-13 00:12:53,997 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=362, Invalid=1044, Unknown=0, NotChecked=0, Total=1406 [2018-04-13 00:12:53,998 INFO L87 Difference]: Start difference. First operand 634 states and 1132 transitions. Second operand 38 states. [2018-04-13 00:12:54,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:54,917 INFO L93 Difference]: Finished difference Result 719 states and 1185 transitions. [2018-04-13 00:12:54,917 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2018-04-13 00:12:54,917 INFO L78 Accepts]: Start accepts. Automaton has 38 states. Word has length 3055 [2018-04-13 00:12:54,918 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:54,919 INFO L225 Difference]: With dead ends: 719 [2018-04-13 00:12:54,919 INFO L226 Difference]: Without dead ends: 719 [2018-04-13 00:12:54,920 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 747 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=702, Invalid=2268, Unknown=0, NotChecked=0, Total=2970 [2018-04-13 00:12:54,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 719 states. [2018-04-13 00:12:54,925 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 719 to 634. [2018-04-13 00:12:54,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:12:54,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1117 transitions. [2018-04-13 00:12:54,928 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1117 transitions. Word has length 3055 [2018-04-13 00:12:54,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:54,928 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1117 transitions. [2018-04-13 00:12:54,929 INFO L460 AbstractCegarLoop]: Interpolant automaton has 38 states. [2018-04-13 00:12:54,929 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1117 transitions. [2018-04-13 00:12:54,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3080 [2018-04-13 00:12:54,962 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:54,962 INFO L355 BasicCegarLoop]: trace histogram [478, 446, 446, 446, 446, 446, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:54,962 INFO L408 AbstractCegarLoop]: === Iteration 223 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:54,962 INFO L82 PathProgramCache]: Analyzing trace with hash -1864488859, now seen corresponding path program 212 times [2018-04-13 00:12:54,963 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:55,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:55,120 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:12:58,077 INFO L134 CoverageAnalysis]: Checked inductivity of 629970 backedges. 19134 proven. 30061 refuted. 0 times theorem prover too weak. 580775 trivial. 0 not checked. [2018-04-13 00:12:58,077 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:12:58,078 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [40] total 40 [2018-04-13 00:12:58,078 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:12:58,079 INFO L134 CoverageAnalysis]: Checked inductivity of 29175 backedges. 947 proven. 1361 refuted. 0 times theorem prover too weak. 26867 trivial. 0 not checked. [2018-04-13 00:12:58,079 INFO L182 omatonBuilderFactory]: Interpolants [299716#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 299717#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 299718#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 299719#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 299712#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 299713#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 299714#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 299715#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 299724#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 17), 299720#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 299721#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 299722#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 299723#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 299685#true, 299686#false, 299687#(<= 0 main_~i~1), 299692#(<= 5 main_~i~1), 299693#(<= 6 main_~i~1), 299694#(<= 7 main_~i~1), 299695#(<= 8 main_~i~1), 299688#(<= 1 main_~i~1), 299689#(<= 2 main_~i~1), 299690#(<= 3 main_~i~1), 299691#(<= 4 main_~i~1), 299700#(<= 13 main_~i~1), 299701#(<= 14 main_~i~1), 299702#(<= 15 main_~i~1), 299703#(<= 16 main_~i~1), 299696#(<= 9 main_~i~1), 299697#(<= 10 main_~i~1), 299698#(<= 11 main_~i~1), 299699#(<= 12 main_~i~1), 299708#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 299709#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 299710#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 299711#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 299704#(<= 17 main_~i~1), 299705#(<= 18 main_~i~1), 299706#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 299707#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1))] [2018-04-13 00:12:58,089 INFO L134 CoverageAnalysis]: Checked inductivity of 629970 backedges. 19134 proven. 30061 refuted. 0 times theorem prover too weak. 580775 trivial. 0 not checked. [2018-04-13 00:12:58,089 INFO L442 AbstractCegarLoop]: Interpolant automaton has 40 states [2018-04-13 00:12:58,089 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2018-04-13 00:12:58,089 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=401, Invalid=1159, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:12:58,090 INFO L87 Difference]: Start difference. First operand 634 states and 1117 transitions. Second operand 40 states. [2018-04-13 00:12:59,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:12:59,008 INFO L93 Difference]: Finished difference Result 724 states and 1175 transitions. [2018-04-13 00:12:59,008 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2018-04-13 00:12:59,008 INFO L78 Accepts]: Start accepts. Automaton has 40 states. Word has length 3079 [2018-04-13 00:12:59,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:12:59,011 INFO L225 Difference]: With dead ends: 724 [2018-04-13 00:12:59,011 INFO L226 Difference]: Without dead ends: 724 [2018-04-13 00:12:59,011 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 836 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=779, Invalid=2527, Unknown=0, NotChecked=0, Total=3306 [2018-04-13 00:12:59,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 724 states. [2018-04-13 00:12:59,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 724 to 634. [2018-04-13 00:12:59,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:12:59,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1103 transitions. [2018-04-13 00:12:59,020 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1103 transitions. Word has length 3079 [2018-04-13 00:12:59,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:12:59,021 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1103 transitions. [2018-04-13 00:12:59,021 INFO L460 AbstractCegarLoop]: Interpolant automaton has 40 states. [2018-04-13 00:12:59,021 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1103 transitions. [2018-04-13 00:12:59,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3104 [2018-04-13 00:12:59,057 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:12:59,057 INFO L355 BasicCegarLoop]: trace histogram [482, 450, 450, 450, 450, 450, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:12:59,057 INFO L408 AbstractCegarLoop]: === Iteration 224 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:12:59,057 INFO L82 PathProgramCache]: Analyzing trace with hash 1798231813, now seen corresponding path program 213 times [2018-04-13 00:12:59,057 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:12:59,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:12:59,223 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:02,454 INFO L134 CoverageAnalysis]: Checked inductivity of 640966 backedges. 22185 proven. 30156 refuted. 0 times theorem prover too weak. 588625 trivial. 0 not checked. [2018-04-13 00:13:02,454 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:02,454 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [42] total 42 [2018-04-13 00:13:02,454 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:02,455 INFO L134 CoverageAnalysis]: Checked inductivity of 29451 backedges. 1057 proven. 1329 refuted. 0 times theorem prover too weak. 27065 trivial. 0 not checked. [2018-04-13 00:13:02,455 INFO L182 omatonBuilderFactory]: Interpolants [301124#(<= 3 main_~i~1), 301125#(<= 4 main_~i~1), 301126#(<= 5 main_~i~1), 301127#(<= 6 main_~i~1), 301120#false, 301121#(<= 0 main_~i~1), 301122#(<= 1 main_~i~1), 301123#(<= 2 main_~i~1), 301132#(<= 11 main_~i~1), 301133#(<= 12 main_~i~1), 301134#(<= 13 main_~i~1), 301135#(<= 14 main_~i~1), 301128#(<= 7 main_~i~1), 301129#(<= 8 main_~i~1), 301130#(<= 9 main_~i~1), 301131#(<= 10 main_~i~1), 301140#(<= 19 main_~i~1), 301141#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 301142#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 301143#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 301136#(<= 15 main_~i~1), 301137#(<= 16 main_~i~1), 301138#(<= 17 main_~i~1), 301139#(<= 18 main_~i~1), 301148#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 301149#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 301150#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 301151#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 301144#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 301145#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 301146#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 301147#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 301156#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 301157#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 301158#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 301159#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 301152#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 301153#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 301154#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 301155#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 301160#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 18), 301119#true] [2018-04-13 00:13:02,466 INFO L134 CoverageAnalysis]: Checked inductivity of 640966 backedges. 22185 proven. 30156 refuted. 0 times theorem prover too weak. 588625 trivial. 0 not checked. [2018-04-13 00:13:02,466 INFO L442 AbstractCegarLoop]: Interpolant automaton has 42 states [2018-04-13 00:13:02,466 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2018-04-13 00:13:02,466 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=442, Invalid=1280, Unknown=0, NotChecked=0, Total=1722 [2018-04-13 00:13:02,466 INFO L87 Difference]: Start difference. First operand 634 states and 1103 transitions. Second operand 42 states. [2018-04-13 00:13:03,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:03,552 INFO L93 Difference]: Finished difference Result 729 states and 1166 transitions. [2018-04-13 00:13:03,552 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2018-04-13 00:13:03,552 INFO L78 Accepts]: Start accepts. Automaton has 42 states. Word has length 3103 [2018-04-13 00:13:03,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:03,555 INFO L225 Difference]: With dead ends: 729 [2018-04-13 00:13:03,555 INFO L226 Difference]: Without dead ends: 729 [2018-04-13 00:13:03,555 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 930 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=860, Invalid=2800, Unknown=0, NotChecked=0, Total=3660 [2018-04-13 00:13:03,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 729 states. [2018-04-13 00:13:03,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 729 to 634. [2018-04-13 00:13:03,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:03,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1090 transitions. [2018-04-13 00:13:03,563 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1090 transitions. Word has length 3103 [2018-04-13 00:13:03,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:03,564 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1090 transitions. [2018-04-13 00:13:03,564 INFO L460 AbstractCegarLoop]: Interpolant automaton has 42 states. [2018-04-13 00:13:03,564 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1090 transitions. [2018-04-13 00:13:03,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3128 [2018-04-13 00:13:03,598 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:03,598 INFO L355 BasicCegarLoop]: trace histogram [486, 454, 454, 454, 454, 454, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:03,598 INFO L408 AbstractCegarLoop]: === Iteration 225 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:03,598 INFO L82 PathProgramCache]: Analyzing trace with hash -1395490139, now seen corresponding path program 214 times [2018-04-13 00:13:03,598 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:03,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:03,763 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:06,797 INFO L134 CoverageAnalysis]: Checked inductivity of 652058 backedges. 25566 proven. 29957 refuted. 0 times theorem prover too weak. 596535 trivial. 0 not checked. [2018-04-13 00:13:06,797 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:06,797 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [44] total 44 [2018-04-13 00:13:06,797 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:06,798 INFO L134 CoverageAnalysis]: Checked inductivity of 29703 backedges. 1173 proven. 1285 refuted. 0 times theorem prover too weak. 27245 trivial. 0 not checked. [2018-04-13 00:13:06,799 INFO L182 omatonBuilderFactory]: Interpolants [302596#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 302597#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 302598#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 302599#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 302592#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 302593#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 302594#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 302595#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 302604#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 302605#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 19), 302600#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 302601#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 302602#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 302603#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 302564#(<= 0 main_~i~1), 302565#(<= 1 main_~i~1), 302566#(<= 2 main_~i~1), 302567#(<= 3 main_~i~1), 302562#true, 302563#false, 302572#(<= 8 main_~i~1), 302573#(<= 9 main_~i~1), 302574#(<= 10 main_~i~1), 302575#(<= 11 main_~i~1), 302568#(<= 4 main_~i~1), 302569#(<= 5 main_~i~1), 302570#(<= 6 main_~i~1), 302571#(<= 7 main_~i~1), 302580#(<= 16 main_~i~1), 302581#(<= 17 main_~i~1), 302582#(<= 18 main_~i~1), 302583#(<= 19 main_~i~1), 302576#(<= 12 main_~i~1), 302577#(<= 13 main_~i~1), 302578#(<= 14 main_~i~1), 302579#(<= 15 main_~i~1), 302588#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 302589#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 302590#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 302591#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 302584#(<= 20 main_~i~1), 302585#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 302586#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 302587#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2))] [2018-04-13 00:13:06,809 INFO L134 CoverageAnalysis]: Checked inductivity of 652058 backedges. 25566 proven. 29957 refuted. 0 times theorem prover too weak. 596535 trivial. 0 not checked. [2018-04-13 00:13:06,809 INFO L442 AbstractCegarLoop]: Interpolant automaton has 44 states [2018-04-13 00:13:06,809 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2018-04-13 00:13:06,809 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=485, Invalid=1407, Unknown=0, NotChecked=0, Total=1892 [2018-04-13 00:13:06,810 INFO L87 Difference]: Start difference. First operand 634 states and 1090 transitions. Second operand 44 states. [2018-04-13 00:13:07,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:07,643 INFO L93 Difference]: Finished difference Result 734 states and 1158 transitions. [2018-04-13 00:13:07,644 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2018-04-13 00:13:07,644 INFO L78 Accepts]: Start accepts. Automaton has 44 states. Word has length 3127 [2018-04-13 00:13:07,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:07,646 INFO L225 Difference]: With dead ends: 734 [2018-04-13 00:13:07,646 INFO L226 Difference]: Without dead ends: 734 [2018-04-13 00:13:07,647 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1029 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=945, Invalid=3087, Unknown=0, NotChecked=0, Total=4032 [2018-04-13 00:13:07,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 734 states. [2018-04-13 00:13:07,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 734 to 634. [2018-04-13 00:13:07,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:07,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1078 transitions. [2018-04-13 00:13:07,655 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1078 transitions. Word has length 3127 [2018-04-13 00:13:07,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:07,656 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1078 transitions. [2018-04-13 00:13:07,656 INFO L460 AbstractCegarLoop]: Interpolant automaton has 44 states. [2018-04-13 00:13:07,656 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1078 transitions. [2018-04-13 00:13:07,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3152 [2018-04-13 00:13:07,692 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:07,693 INFO L355 BasicCegarLoop]: trace histogram [490, 458, 458, 458, 458, 458, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:07,693 INFO L408 AbstractCegarLoop]: === Iteration 226 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:07,693 INFO L82 PathProgramCache]: Analyzing trace with hash -92370107, now seen corresponding path program 215 times [2018-04-13 00:13:07,693 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:07,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:07,857 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:11,013 INFO L134 CoverageAnalysis]: Checked inductivity of 663246 backedges. 29295 proven. 29446 refuted. 0 times theorem prover too weak. 604505 trivial. 0 not checked. [2018-04-13 00:13:11,013 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:11,013 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [46] total 46 [2018-04-13 00:13:11,013 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:11,014 INFO L134 CoverageAnalysis]: Checked inductivity of 29931 backedges. 1295 proven. 1229 refuted. 0 times theorem prover too weak. 27407 trivial. 0 not checked. [2018-04-13 00:13:11,014 INFO L182 omatonBuilderFactory]: Interpolants [304014#true, 304015#false, 304020#(<= 4 main_~i~1), 304021#(<= 5 main_~i~1), 304022#(<= 6 main_~i~1), 304023#(<= 7 main_~i~1), 304016#(<= 0 main_~i~1), 304017#(<= 1 main_~i~1), 304018#(<= 2 main_~i~1), 304019#(<= 3 main_~i~1), 304028#(<= 12 main_~i~1), 304029#(<= 13 main_~i~1), 304030#(<= 14 main_~i~1), 304031#(<= 15 main_~i~1), 304024#(<= 8 main_~i~1), 304025#(<= 9 main_~i~1), 304026#(<= 10 main_~i~1), 304027#(<= 11 main_~i~1), 304036#(<= 20 main_~i~1), 304037#(<= 21 main_~i~1), 304038#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 304039#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 304032#(<= 16 main_~i~1), 304033#(<= 17 main_~i~1), 304034#(<= 18 main_~i~1), 304035#(<= 19 main_~i~1), 304044#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 304045#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 304046#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 304047#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 304040#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 304041#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 304042#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 304043#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 304052#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 304053#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 304054#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 304055#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 304048#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 304049#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 304050#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 304051#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 304056#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 304057#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 304058#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 304059#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 20)] [2018-04-13 00:13:11,025 INFO L134 CoverageAnalysis]: Checked inductivity of 663246 backedges. 29295 proven. 29446 refuted. 0 times theorem prover too weak. 604505 trivial. 0 not checked. [2018-04-13 00:13:11,026 INFO L442 AbstractCegarLoop]: Interpolant automaton has 46 states [2018-04-13 00:13:11,026 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2018-04-13 00:13:11,026 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=530, Invalid=1540, Unknown=0, NotChecked=0, Total=2070 [2018-04-13 00:13:11,026 INFO L87 Difference]: Start difference. First operand 634 states and 1078 transitions. Second operand 46 states. [2018-04-13 00:13:12,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:12,415 INFO L93 Difference]: Finished difference Result 739 states and 1151 transitions. [2018-04-13 00:13:12,415 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2018-04-13 00:13:12,415 INFO L78 Accepts]: Start accepts. Automaton has 46 states. Word has length 3151 [2018-04-13 00:13:12,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:12,417 INFO L225 Difference]: With dead ends: 739 [2018-04-13 00:13:12,417 INFO L226 Difference]: Without dead ends: 739 [2018-04-13 00:13:12,417 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1133 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=1034, Invalid=3388, Unknown=0, NotChecked=0, Total=4422 [2018-04-13 00:13:12,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 739 states. [2018-04-13 00:13:12,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 739 to 634. [2018-04-13 00:13:12,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:12,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1067 transitions. [2018-04-13 00:13:12,425 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1067 transitions. Word has length 3151 [2018-04-13 00:13:12,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:12,425 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1067 transitions. [2018-04-13 00:13:12,425 INFO L460 AbstractCegarLoop]: Interpolant automaton has 46 states. [2018-04-13 00:13:12,425 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1067 transitions. [2018-04-13 00:13:12,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3176 [2018-04-13 00:13:12,461 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:12,461 INFO L355 BasicCegarLoop]: trace histogram [494, 462, 462, 462, 462, 462, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:12,461 INFO L408 AbstractCegarLoop]: === Iteration 227 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:12,461 INFO L82 PathProgramCache]: Analyzing trace with hash -321253147, now seen corresponding path program 216 times [2018-04-13 00:13:12,461 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:12,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:12,612 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:16,014 INFO L134 CoverageAnalysis]: Checked inductivity of 674530 backedges. 33390 proven. 28605 refuted. 0 times theorem prover too weak. 612535 trivial. 0 not checked. [2018-04-13 00:13:16,038 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:16,038 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [48] total 48 [2018-04-13 00:13:16,038 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:16,040 INFO L134 CoverageAnalysis]: Checked inductivity of 30135 backedges. 1423 proven. 1161 refuted. 0 times theorem prover too weak. 27551 trivial. 0 not checked. [2018-04-13 00:13:16,040 INFO L182 omatonBuilderFactory]: Interpolants [305476#false, 305477#(<= 0 main_~i~1), 305478#(<= 1 main_~i~1), 305479#(<= 2 main_~i~1), 305475#true, 305484#(<= 7 main_~i~1), 305485#(<= 8 main_~i~1), 305486#(<= 9 main_~i~1), 305487#(<= 10 main_~i~1), 305480#(<= 3 main_~i~1), 305481#(<= 4 main_~i~1), 305482#(<= 5 main_~i~1), 305483#(<= 6 main_~i~1), 305492#(<= 15 main_~i~1), 305493#(<= 16 main_~i~1), 305494#(<= 17 main_~i~1), 305495#(<= 18 main_~i~1), 305488#(<= 11 main_~i~1), 305489#(<= 12 main_~i~1), 305490#(<= 13 main_~i~1), 305491#(<= 14 main_~i~1), 305500#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 305501#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 305502#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 305503#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 305496#(<= 19 main_~i~1), 305497#(<= 20 main_~i~1), 305498#(<= 21 main_~i~1), 305499#(<= 22 main_~i~1), 305508#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 305509#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 305510#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 305511#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 305504#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 305505#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 305506#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 305507#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 305516#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 305517#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 305518#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 305519#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 305512#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 305513#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 305514#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 305515#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 305520#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 305521#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 305522#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 21)] [2018-04-13 00:13:16,051 INFO L134 CoverageAnalysis]: Checked inductivity of 674530 backedges. 33390 proven. 28605 refuted. 0 times theorem prover too weak. 612535 trivial. 0 not checked. [2018-04-13 00:13:16,051 INFO L442 AbstractCegarLoop]: Interpolant automaton has 48 states [2018-04-13 00:13:16,051 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2018-04-13 00:13:16,052 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=577, Invalid=1679, Unknown=0, NotChecked=0, Total=2256 [2018-04-13 00:13:16,052 INFO L87 Difference]: Start difference. First operand 634 states and 1067 transitions. Second operand 48 states. [2018-04-13 00:13:17,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:17,662 INFO L93 Difference]: Finished difference Result 744 states and 1145 transitions. [2018-04-13 00:13:17,662 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2018-04-13 00:13:17,662 INFO L78 Accepts]: Start accepts. Automaton has 48 states. Word has length 3175 [2018-04-13 00:13:17,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:17,665 INFO L225 Difference]: With dead ends: 744 [2018-04-13 00:13:17,665 INFO L226 Difference]: Without dead ends: 744 [2018-04-13 00:13:17,665 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1242 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=1127, Invalid=3703, Unknown=0, NotChecked=0, Total=4830 [2018-04-13 00:13:17,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 744 states. [2018-04-13 00:13:17,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 744 to 634. [2018-04-13 00:13:17,672 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:17,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1057 transitions. [2018-04-13 00:13:17,675 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1057 transitions. Word has length 3175 [2018-04-13 00:13:17,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:17,675 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1057 transitions. [2018-04-13 00:13:17,675 INFO L460 AbstractCegarLoop]: Interpolant automaton has 48 states. [2018-04-13 00:13:17,675 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1057 transitions. [2018-04-13 00:13:17,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3200 [2018-04-13 00:13:17,731 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:17,731 INFO L355 BasicCegarLoop]: trace histogram [498, 466, 466, 466, 466, 466, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:17,731 INFO L408 AbstractCegarLoop]: === Iteration 228 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:17,732 INFO L82 PathProgramCache]: Analyzing trace with hash 1988490117, now seen corresponding path program 217 times [2018-04-13 00:13:17,732 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:17,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:17,894 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:21,325 INFO L134 CoverageAnalysis]: Checked inductivity of 685910 backedges. 37869 proven. 27416 refuted. 0 times theorem prover too weak. 620625 trivial. 0 not checked. [2018-04-13 00:13:21,326 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:21,326 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [50] total 50 [2018-04-13 00:13:21,326 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:21,327 INFO L134 CoverageAnalysis]: Checked inductivity of 30315 backedges. 1557 proven. 1081 refuted. 0 times theorem prover too weak. 27677 trivial. 0 not checked. [2018-04-13 00:13:21,327 INFO L182 omatonBuilderFactory]: Interpolants [306948#(<= 1 main_~i~1), 306949#(<= 2 main_~i~1), 306950#(<= 3 main_~i~1), 306951#(<= 4 main_~i~1), 306945#true, 306946#false, 306947#(<= 0 main_~i~1), 306956#(<= 9 main_~i~1), 306957#(<= 10 main_~i~1), 306958#(<= 11 main_~i~1), 306959#(<= 12 main_~i~1), 306952#(<= 5 main_~i~1), 306953#(<= 6 main_~i~1), 306954#(<= 7 main_~i~1), 306955#(<= 8 main_~i~1), 306964#(<= 17 main_~i~1), 306965#(<= 18 main_~i~1), 306966#(<= 19 main_~i~1), 306967#(<= 20 main_~i~1), 306960#(<= 13 main_~i~1), 306961#(<= 14 main_~i~1), 306962#(<= 15 main_~i~1), 306963#(<= 16 main_~i~1), 306972#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 306973#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 306974#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 306975#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 306968#(<= 21 main_~i~1), 306969#(<= 22 main_~i~1), 306970#(<= 23 main_~i~1), 306971#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 306980#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 306981#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 306982#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 306983#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 306976#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 306977#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 306978#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 306979#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 306988#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 306989#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 306990#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 306991#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 306984#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 306985#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 306986#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 306987#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 306992#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 306993#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 306994#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 22)] [2018-04-13 00:13:21,339 INFO L134 CoverageAnalysis]: Checked inductivity of 685910 backedges. 37869 proven. 27416 refuted. 0 times theorem prover too weak. 620625 trivial. 0 not checked. [2018-04-13 00:13:21,339 INFO L442 AbstractCegarLoop]: Interpolant automaton has 50 states [2018-04-13 00:13:21,339 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2018-04-13 00:13:21,339 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=626, Invalid=1824, Unknown=0, NotChecked=0, Total=2450 [2018-04-13 00:13:21,339 INFO L87 Difference]: Start difference. First operand 634 states and 1057 transitions. Second operand 50 states. [2018-04-13 00:13:22,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:22,954 INFO L93 Difference]: Finished difference Result 749 states and 1140 transitions. [2018-04-13 00:13:22,954 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 72 states. [2018-04-13 00:13:22,954 INFO L78 Accepts]: Start accepts. Automaton has 50 states. Word has length 3199 [2018-04-13 00:13:22,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:22,957 INFO L225 Difference]: With dead ends: 749 [2018-04-13 00:13:22,957 INFO L226 Difference]: Without dead ends: 749 [2018-04-13 00:13:22,957 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1356 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=1224, Invalid=4032, Unknown=0, NotChecked=0, Total=5256 [2018-04-13 00:13:22,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 749 states. [2018-04-13 00:13:22,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 749 to 634. [2018-04-13 00:13:22,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:22,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1048 transitions. [2018-04-13 00:13:22,965 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1048 transitions. Word has length 3199 [2018-04-13 00:13:22,966 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:22,966 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1048 transitions. [2018-04-13 00:13:22,966 INFO L460 AbstractCegarLoop]: Interpolant automaton has 50 states. [2018-04-13 00:13:22,966 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1048 transitions. [2018-04-13 00:13:23,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3224 [2018-04-13 00:13:23,003 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:23,003 INFO L355 BasicCegarLoop]: trace histogram [502, 470, 470, 470, 470, 470, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:23,004 INFO L408 AbstractCegarLoop]: === Iteration 229 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:23,004 INFO L82 PathProgramCache]: Analyzing trace with hash -988490971, now seen corresponding path program 218 times [2018-04-13 00:13:23,004 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:23,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:23,167 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:26,596 INFO L134 CoverageAnalysis]: Checked inductivity of 697386 backedges. 42750 proven. 25861 refuted. 0 times theorem prover too weak. 628775 trivial. 0 not checked. [2018-04-13 00:13:26,596 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:26,597 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [52] total 52 [2018-04-13 00:13:26,597 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:26,598 INFO L134 CoverageAnalysis]: Checked inductivity of 30471 backedges. 1697 proven. 989 refuted. 0 times theorem prover too weak. 27785 trivial. 0 not checked. [2018-04-13 00:13:26,598 INFO L182 omatonBuilderFactory]: Interpolants [308428#(<= 2 main_~i~1), 308429#(<= 3 main_~i~1), 308430#(<= 4 main_~i~1), 308431#(<= 5 main_~i~1), 308424#true, 308425#false, 308426#(<= 0 main_~i~1), 308427#(<= 1 main_~i~1), 308436#(<= 10 main_~i~1), 308437#(<= 11 main_~i~1), 308438#(<= 12 main_~i~1), 308439#(<= 13 main_~i~1), 308432#(<= 6 main_~i~1), 308433#(<= 7 main_~i~1), 308434#(<= 8 main_~i~1), 308435#(<= 9 main_~i~1), 308444#(<= 18 main_~i~1), 308445#(<= 19 main_~i~1), 308446#(<= 20 main_~i~1), 308447#(<= 21 main_~i~1), 308440#(<= 14 main_~i~1), 308441#(<= 15 main_~i~1), 308442#(<= 16 main_~i~1), 308443#(<= 17 main_~i~1), 308452#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 308453#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 308454#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 308455#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 308448#(<= 22 main_~i~1), 308449#(<= 23 main_~i~1), 308450#(<= 24 main_~i~1), 308451#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 308460#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 308461#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 308462#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 308463#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 308456#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 308457#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 308458#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 308459#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 308468#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 308469#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 308470#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 308471#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 308464#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 308465#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 308466#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 308467#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 308472#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 308473#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 308474#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 308475#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 23)] [2018-04-13 00:13:26,609 INFO L134 CoverageAnalysis]: Checked inductivity of 697386 backedges. 42750 proven. 25861 refuted. 0 times theorem prover too weak. 628775 trivial. 0 not checked. [2018-04-13 00:13:26,609 INFO L442 AbstractCegarLoop]: Interpolant automaton has 52 states [2018-04-13 00:13:26,609 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2018-04-13 00:13:26,609 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=677, Invalid=1975, Unknown=0, NotChecked=0, Total=2652 [2018-04-13 00:13:26,610 INFO L87 Difference]: Start difference. First operand 634 states and 1048 transitions. Second operand 52 states. [2018-04-13 00:13:28,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:28,411 INFO L93 Difference]: Finished difference Result 754 states and 1136 transitions. [2018-04-13 00:13:28,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2018-04-13 00:13:28,411 INFO L78 Accepts]: Start accepts. Automaton has 52 states. Word has length 3223 [2018-04-13 00:13:28,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:28,414 INFO L225 Difference]: With dead ends: 754 [2018-04-13 00:13:28,414 INFO L226 Difference]: Without dead ends: 754 [2018-04-13 00:13:28,415 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1475 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=1325, Invalid=4375, Unknown=0, NotChecked=0, Total=5700 [2018-04-13 00:13:28,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 754 states. [2018-04-13 00:13:28,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 754 to 634. [2018-04-13 00:13:28,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:28,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1040 transitions. [2018-04-13 00:13:28,426 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1040 transitions. Word has length 3223 [2018-04-13 00:13:28,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:28,426 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1040 transitions. [2018-04-13 00:13:28,426 INFO L460 AbstractCegarLoop]: Interpolant automaton has 52 states. [2018-04-13 00:13:28,426 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1040 transitions. [2018-04-13 00:13:28,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3248 [2018-04-13 00:13:28,465 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:28,465 INFO L355 BasicCegarLoop]: trace histogram [506, 474, 474, 474, 474, 474, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:28,465 INFO L408 AbstractCegarLoop]: === Iteration 230 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:28,465 INFO L82 PathProgramCache]: Analyzing trace with hash 2129858501, now seen corresponding path program 219 times [2018-04-13 00:13:28,466 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:28,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:28,678 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:32,153 INFO L134 CoverageAnalysis]: Checked inductivity of 708958 backedges. 48051 proven. 23922 refuted. 0 times theorem prover too weak. 636985 trivial. 0 not checked. [2018-04-13 00:13:32,153 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:32,154 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [54] total 54 [2018-04-13 00:13:32,154 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:32,155 INFO L134 CoverageAnalysis]: Checked inductivity of 30603 backedges. 1843 proven. 885 refuted. 0 times theorem prover too weak. 27875 trivial. 0 not checked. [2018-04-13 00:13:32,155 INFO L182 omatonBuilderFactory]: Interpolants [309916#(<= 2 main_~i~1), 309917#(<= 3 main_~i~1), 309918#(<= 4 main_~i~1), 309919#(<= 5 main_~i~1), 309912#true, 309913#false, 309914#(<= 0 main_~i~1), 309915#(<= 1 main_~i~1), 309924#(<= 10 main_~i~1), 309925#(<= 11 main_~i~1), 309926#(<= 12 main_~i~1), 309927#(<= 13 main_~i~1), 309920#(<= 6 main_~i~1), 309921#(<= 7 main_~i~1), 309922#(<= 8 main_~i~1), 309923#(<= 9 main_~i~1), 309932#(<= 18 main_~i~1), 309933#(<= 19 main_~i~1), 309934#(<= 20 main_~i~1), 309935#(<= 21 main_~i~1), 309928#(<= 14 main_~i~1), 309929#(<= 15 main_~i~1), 309930#(<= 16 main_~i~1), 309931#(<= 17 main_~i~1), 309940#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 309941#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 309942#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 309943#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 309936#(<= 22 main_~i~1), 309937#(<= 23 main_~i~1), 309938#(<= 24 main_~i~1), 309939#(<= 25 main_~i~1), 309948#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 309949#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 309950#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 309951#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 309944#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 309945#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 309946#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 309947#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 309956#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 309957#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 309958#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 309959#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 309952#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 309953#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 309954#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 309955#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 309964#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 309965#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 24), 309960#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 309961#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 309962#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 309963#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23))] [2018-04-13 00:13:32,169 INFO L134 CoverageAnalysis]: Checked inductivity of 708958 backedges. 48051 proven. 23922 refuted. 0 times theorem prover too weak. 636985 trivial. 0 not checked. [2018-04-13 00:13:32,169 INFO L442 AbstractCegarLoop]: Interpolant automaton has 54 states [2018-04-13 00:13:32,169 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2018-04-13 00:13:32,169 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=730, Invalid=2132, Unknown=0, NotChecked=0, Total=2862 [2018-04-13 00:13:32,169 INFO L87 Difference]: Start difference. First operand 634 states and 1040 transitions. Second operand 54 states. [2018-04-13 00:13:33,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:33,875 INFO L93 Difference]: Finished difference Result 759 states and 1133 transitions. [2018-04-13 00:13:33,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2018-04-13 00:13:33,875 INFO L78 Accepts]: Start accepts. Automaton has 54 states. Word has length 3247 [2018-04-13 00:13:33,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:33,879 INFO L225 Difference]: With dead ends: 759 [2018-04-13 00:13:33,879 INFO L226 Difference]: Without dead ends: 759 [2018-04-13 00:13:33,879 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1599 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=1430, Invalid=4732, Unknown=0, NotChecked=0, Total=6162 [2018-04-13 00:13:33,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 759 states. [2018-04-13 00:13:33,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 759 to 634. [2018-04-13 00:13:33,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:33,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1033 transitions. [2018-04-13 00:13:33,889 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1033 transitions. Word has length 3247 [2018-04-13 00:13:33,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:33,890 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1033 transitions. [2018-04-13 00:13:33,890 INFO L460 AbstractCegarLoop]: Interpolant automaton has 54 states. [2018-04-13 00:13:33,890 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1033 transitions. [2018-04-13 00:13:33,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3272 [2018-04-13 00:13:33,929 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:33,930 INFO L355 BasicCegarLoop]: trace histogram [510, 478, 478, 478, 478, 478, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:33,930 INFO L408 AbstractCegarLoop]: === Iteration 231 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:33,930 INFO L82 PathProgramCache]: Analyzing trace with hash -2076259995, now seen corresponding path program 220 times [2018-04-13 00:13:33,930 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:34,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:34,113 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:37,809 INFO L134 CoverageAnalysis]: Checked inductivity of 720626 backedges. 53790 proven. 21581 refuted. 0 times theorem prover too weak. 645255 trivial. 0 not checked. [2018-04-13 00:13:37,810 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:37,810 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [56] total 56 [2018-04-13 00:13:37,810 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:37,811 INFO L134 CoverageAnalysis]: Checked inductivity of 30711 backedges. 1995 proven. 769 refuted. 0 times theorem prover too weak. 27947 trivial. 0 not checked. [2018-04-13 00:13:37,811 INFO L182 omatonBuilderFactory]: Interpolants [311428#(<= 17 main_~i~1), 311429#(<= 18 main_~i~1), 311430#(<= 19 main_~i~1), 311431#(<= 20 main_~i~1), 311424#(<= 13 main_~i~1), 311425#(<= 14 main_~i~1), 311426#(<= 15 main_~i~1), 311427#(<= 16 main_~i~1), 311436#(<= 25 main_~i~1), 311437#(<= 26 main_~i~1), 311438#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 311439#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 311432#(<= 21 main_~i~1), 311433#(<= 22 main_~i~1), 311434#(<= 23 main_~i~1), 311435#(<= 24 main_~i~1), 311444#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 311445#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 311446#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 311447#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 311440#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 311441#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 311442#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 311443#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 311452#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 311453#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 311454#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 311455#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 311448#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 311449#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 311450#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 311451#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 311460#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 311461#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 311462#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 311463#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 311456#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 311457#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 311458#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 311459#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 311464#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 25), 311412#(<= 1 main_~i~1), 311413#(<= 2 main_~i~1), 311414#(<= 3 main_~i~1), 311415#(<= 4 main_~i~1), 311409#true, 311410#false, 311411#(<= 0 main_~i~1), 311420#(<= 9 main_~i~1), 311421#(<= 10 main_~i~1), 311422#(<= 11 main_~i~1), 311423#(<= 12 main_~i~1), 311416#(<= 5 main_~i~1), 311417#(<= 6 main_~i~1), 311418#(<= 7 main_~i~1), 311419#(<= 8 main_~i~1)] [2018-04-13 00:13:37,823 INFO L134 CoverageAnalysis]: Checked inductivity of 720626 backedges. 53790 proven. 21581 refuted. 0 times theorem prover too weak. 645255 trivial. 0 not checked. [2018-04-13 00:13:37,824 INFO L442 AbstractCegarLoop]: Interpolant automaton has 56 states [2018-04-13 00:13:37,824 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2018-04-13 00:13:37,824 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=785, Invalid=2295, Unknown=0, NotChecked=0, Total=3080 [2018-04-13 00:13:37,824 INFO L87 Difference]: Start difference. First operand 634 states and 1033 transitions. Second operand 56 states. [2018-04-13 00:13:39,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:39,846 INFO L93 Difference]: Finished difference Result 764 states and 1131 transitions. [2018-04-13 00:13:39,846 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 81 states. [2018-04-13 00:13:39,846 INFO L78 Accepts]: Start accepts. Automaton has 56 states. Word has length 3271 [2018-04-13 00:13:39,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:39,849 INFO L225 Difference]: With dead ends: 764 [2018-04-13 00:13:39,849 INFO L226 Difference]: Without dead ends: 764 [2018-04-13 00:13:39,849 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1728 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=1539, Invalid=5103, Unknown=0, NotChecked=0, Total=6642 [2018-04-13 00:13:39,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 764 states. [2018-04-13 00:13:39,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 764 to 634. [2018-04-13 00:13:39,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:39,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1027 transitions. [2018-04-13 00:13:39,858 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1027 transitions. Word has length 3271 [2018-04-13 00:13:39,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:39,859 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1027 transitions. [2018-04-13 00:13:39,859 INFO L460 AbstractCegarLoop]: Interpolant automaton has 56 states. [2018-04-13 00:13:39,859 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1027 transitions. [2018-04-13 00:13:39,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3296 [2018-04-13 00:13:39,898 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:39,899 INFO L355 BasicCegarLoop]: trace histogram [514, 482, 482, 482, 482, 482, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:39,899 INFO L408 AbstractCegarLoop]: === Iteration 232 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:39,899 INFO L82 PathProgramCache]: Analyzing trace with hash 479191045, now seen corresponding path program 221 times [2018-04-13 00:13:39,899 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:40,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:40,076 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:43,738 INFO L134 CoverageAnalysis]: Checked inductivity of 732390 backedges. 59985 proven. 18820 refuted. 0 times theorem prover too weak. 653585 trivial. 0 not checked. [2018-04-13 00:13:43,738 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:43,738 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [58] total 58 [2018-04-13 00:13:43,739 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:43,740 INFO L134 CoverageAnalysis]: Checked inductivity of 30795 backedges. 2153 proven. 641 refuted. 0 times theorem prover too weak. 28001 trivial. 0 not checked. [2018-04-13 00:13:43,740 INFO L182 omatonBuilderFactory]: Interpolants [312964#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 312965#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 312966#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 312967#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 312960#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 312961#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 312962#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 312963#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 312972#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 26), 312968#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 312969#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 312970#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 312971#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 26)), 312916#false, 312917#(<= 0 main_~i~1), 312918#(<= 1 main_~i~1), 312919#(<= 2 main_~i~1), 312915#true, 312924#(<= 7 main_~i~1), 312925#(<= 8 main_~i~1), 312926#(<= 9 main_~i~1), 312927#(<= 10 main_~i~1), 312920#(<= 3 main_~i~1), 312921#(<= 4 main_~i~1), 312922#(<= 5 main_~i~1), 312923#(<= 6 main_~i~1), 312932#(<= 15 main_~i~1), 312933#(<= 16 main_~i~1), 312934#(<= 17 main_~i~1), 312935#(<= 18 main_~i~1), 312928#(<= 11 main_~i~1), 312929#(<= 12 main_~i~1), 312930#(<= 13 main_~i~1), 312931#(<= 14 main_~i~1), 312940#(<= 23 main_~i~1), 312941#(<= 24 main_~i~1), 312942#(<= 25 main_~i~1), 312943#(<= 26 main_~i~1), 312936#(<= 19 main_~i~1), 312937#(<= 20 main_~i~1), 312938#(<= 21 main_~i~1), 312939#(<= 22 main_~i~1), 312948#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 312949#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 312950#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 312951#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 312944#(<= 27 main_~i~1), 312945#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 312946#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 312947#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 312956#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 312957#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 312958#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 312959#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 312952#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 312953#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 312954#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 312955#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10))] [2018-04-13 00:13:43,752 INFO L134 CoverageAnalysis]: Checked inductivity of 732390 backedges. 59985 proven. 18820 refuted. 0 times theorem prover too weak. 653585 trivial. 0 not checked. [2018-04-13 00:13:43,752 INFO L442 AbstractCegarLoop]: Interpolant automaton has 58 states [2018-04-13 00:13:43,752 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2018-04-13 00:13:43,753 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=842, Invalid=2464, Unknown=0, NotChecked=0, Total=3306 [2018-04-13 00:13:43,753 INFO L87 Difference]: Start difference. First operand 634 states and 1027 transitions. Second operand 58 states. [2018-04-13 00:13:45,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:45,245 INFO L93 Difference]: Finished difference Result 773 states and 1134 transitions. [2018-04-13 00:13:45,245 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 84 states. [2018-04-13 00:13:45,245 INFO L78 Accepts]: Start accepts. Automaton has 58 states. Word has length 3295 [2018-04-13 00:13:45,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:45,248 INFO L225 Difference]: With dead ends: 773 [2018-04-13 00:13:45,248 INFO L226 Difference]: Without dead ends: 773 [2018-04-13 00:13:45,249 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1862 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=1652, Invalid=5488, Unknown=0, NotChecked=0, Total=7140 [2018-04-13 00:13:45,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 773 states. [2018-04-13 00:13:45,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 773 to 634. [2018-04-13 00:13:45,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 634 states. [2018-04-13 00:13:45,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 634 states and 1022 transitions. [2018-04-13 00:13:45,257 INFO L78 Accepts]: Start accepts. Automaton has 634 states and 1022 transitions. Word has length 3295 [2018-04-13 00:13:45,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:45,258 INFO L459 AbstractCegarLoop]: Abstraction has 634 states and 1022 transitions. [2018-04-13 00:13:45,258 INFO L460 AbstractCegarLoop]: Interpolant automaton has 58 states. [2018-04-13 00:13:45,258 INFO L276 IsEmpty]: Start isEmpty. Operand 634 states and 1022 transitions. [2018-04-13 00:13:45,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3320 [2018-04-13 00:13:45,314 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:45,314 INFO L355 BasicCegarLoop]: trace histogram [518, 486, 486, 486, 486, 486, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:45,314 INFO L408 AbstractCegarLoop]: === Iteration 233 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:45,315 INFO L82 PathProgramCache]: Analyzing trace with hash -1078987867, now seen corresponding path program 222 times [2018-04-13 00:13:45,315 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:45,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:45,489 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:49,403 INFO L134 CoverageAnalysis]: Checked inductivity of 744250 backedges. 66654 proven. 15621 refuted. 0 times theorem prover too weak. 661975 trivial. 0 not checked. [2018-04-13 00:13:49,403 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:49,425 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [60] total 60 [2018-04-13 00:13:49,425 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:49,426 INFO L134 CoverageAnalysis]: Checked inductivity of 30855 backedges. 2317 proven. 501 refuted. 0 times theorem prover too weak. 28037 trivial. 0 not checked. [2018-04-13 00:13:49,426 INFO L182 omatonBuilderFactory]: Interpolants [314436#(<= 0 main_~i~1), 314437#(<= 1 main_~i~1), 314438#(<= 2 main_~i~1), 314439#(<= 3 main_~i~1), 314434#true, 314435#false, 314444#(<= 8 main_~i~1), 314445#(<= 9 main_~i~1), 314446#(<= 10 main_~i~1), 314447#(<= 11 main_~i~1), 314440#(<= 4 main_~i~1), 314441#(<= 5 main_~i~1), 314442#(<= 6 main_~i~1), 314443#(<= 7 main_~i~1), 314452#(<= 16 main_~i~1), 314453#(<= 17 main_~i~1), 314454#(<= 18 main_~i~1), 314455#(<= 19 main_~i~1), 314448#(<= 12 main_~i~1), 314449#(<= 13 main_~i~1), 314450#(<= 14 main_~i~1), 314451#(<= 15 main_~i~1), 314460#(<= 24 main_~i~1), 314461#(<= 25 main_~i~1), 314462#(<= 26 main_~i~1), 314463#(<= 27 main_~i~1), 314456#(<= 20 main_~i~1), 314457#(<= 21 main_~i~1), 314458#(<= 22 main_~i~1), 314459#(<= 23 main_~i~1), 314468#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 314469#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 314470#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 314471#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 314464#(<= 28 main_~i~1), 314465#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 314466#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 314467#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 314476#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 314477#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 314478#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 314479#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 314472#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 314473#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 314474#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 314475#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 314484#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 314485#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 314486#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 314487#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 314480#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 314481#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 314482#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 314483#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 314492#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 27)), 314493#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 27), 314488#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 314489#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 314490#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 314491#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 26))] [2018-04-13 00:13:49,438 INFO L134 CoverageAnalysis]: Checked inductivity of 744250 backedges. 66654 proven. 15621 refuted. 0 times theorem prover too weak. 661975 trivial. 0 not checked. [2018-04-13 00:13:49,439 INFO L442 AbstractCegarLoop]: Interpolant automaton has 60 states [2018-04-13 00:13:49,439 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2018-04-13 00:13:49,439 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=901, Invalid=2639, Unknown=0, NotChecked=0, Total=3540 [2018-04-13 00:13:49,439 INFO L87 Difference]: Start difference. First operand 634 states and 1022 transitions. Second operand 60 states. [2018-04-13 00:13:51,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:51,475 INFO L93 Difference]: Finished difference Result 787 states and 1173 transitions. [2018-04-13 00:13:51,476 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 87 states. [2018-04-13 00:13:51,476 INFO L78 Accepts]: Start accepts. Automaton has 60 states. Word has length 3319 [2018-04-13 00:13:51,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:51,479 INFO L225 Difference]: With dead ends: 787 [2018-04-13 00:13:51,479 INFO L226 Difference]: Without dead ends: 787 [2018-04-13 00:13:51,480 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2001 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=1769, Invalid=5887, Unknown=0, NotChecked=0, Total=7656 [2018-04-13 00:13:51,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 787 states. [2018-04-13 00:13:51,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 787 to 643. [2018-04-13 00:13:51,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 643 states. [2018-04-13 00:13:51,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 643 states to 643 states and 1057 transitions. [2018-04-13 00:13:51,489 INFO L78 Accepts]: Start accepts. Automaton has 643 states and 1057 transitions. Word has length 3319 [2018-04-13 00:13:51,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:51,489 INFO L459 AbstractCegarLoop]: Abstraction has 643 states and 1057 transitions. [2018-04-13 00:13:51,490 INFO L460 AbstractCegarLoop]: Interpolant automaton has 60 states. [2018-04-13 00:13:51,490 INFO L276 IsEmpty]: Start isEmpty. Operand 643 states and 1057 transitions. [2018-04-13 00:13:51,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3344 [2018-04-13 00:13:51,531 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:51,531 INFO L355 BasicCegarLoop]: trace histogram [522, 490, 490, 490, 490, 490, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:51,531 INFO L408 AbstractCegarLoop]: === Iteration 234 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:51,531 INFO L82 PathProgramCache]: Analyzing trace with hash 1799513157, now seen corresponding path program 223 times [2018-04-13 00:13:51,531 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:51,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:51,747 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:13:55,598 INFO L134 CoverageAnalysis]: Checked inductivity of 756206 backedges. 73815 proven. 11966 refuted. 0 times theorem prover too weak. 670425 trivial. 0 not checked. [2018-04-13 00:13:55,598 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:13:55,598 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [62] total 62 [2018-04-13 00:13:55,598 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:13:55,599 INFO L134 CoverageAnalysis]: Checked inductivity of 30879 backedges. 2487 proven. 346 refuted. 0 times theorem prover too weak. 28046 trivial. 0 not checked. [2018-04-13 00:13:55,599 INFO L182 omatonBuilderFactory]: Interpolants [316036#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 316037#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 316038#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 26)), 316039#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 27)), 316032#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 316033#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 316034#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 316035#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 316040#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 28)), 316041#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 28), 315980#true, 315981#false, 315982#(<= 0 main_~i~1), 315983#(<= 1 main_~i~1), 315988#(<= 6 main_~i~1), 315989#(<= 7 main_~i~1), 315990#(<= 8 main_~i~1), 315991#(<= 9 main_~i~1), 315984#(<= 2 main_~i~1), 315985#(<= 3 main_~i~1), 315986#(<= 4 main_~i~1), 315987#(<= 5 main_~i~1), 315996#(<= 14 main_~i~1), 315997#(<= 15 main_~i~1), 315998#(<= 16 main_~i~1), 315999#(<= 17 main_~i~1), 315992#(<= 10 main_~i~1), 315993#(<= 11 main_~i~1), 315994#(<= 12 main_~i~1), 315995#(<= 13 main_~i~1), 316004#(<= 22 main_~i~1), 316005#(<= 23 main_~i~1), 316006#(<= 24 main_~i~1), 316007#(<= 25 main_~i~1), 316000#(<= 18 main_~i~1), 316001#(<= 19 main_~i~1), 316002#(<= 20 main_~i~1), 316003#(<= 21 main_~i~1), 316012#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 316013#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 316014#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 316015#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 316008#(<= 26 main_~i~1), 316009#(<= 27 main_~i~1), 316010#(<= 28 main_~i~1), 316011#(<= 29 main_~i~1), 316020#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 316021#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 316022#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 316023#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 316016#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 316017#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 316018#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 316019#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 316028#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 316029#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 316030#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 316031#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 316024#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 316025#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 316026#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 316027#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15))] [2018-04-13 00:13:55,612 INFO L134 CoverageAnalysis]: Checked inductivity of 756206 backedges. 73815 proven. 11966 refuted. 0 times theorem prover too weak. 670425 trivial. 0 not checked. [2018-04-13 00:13:55,612 INFO L442 AbstractCegarLoop]: Interpolant automaton has 62 states [2018-04-13 00:13:55,612 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2018-04-13 00:13:55,612 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=962, Invalid=2820, Unknown=0, NotChecked=0, Total=3782 [2018-04-13 00:13:55,612 INFO L87 Difference]: Start difference. First operand 643 states and 1057 transitions. Second operand 62 states. [2018-04-13 00:13:56,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:13:56,963 INFO L93 Difference]: Finished difference Result 801 states and 1213 transitions. [2018-04-13 00:13:56,963 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 90 states. [2018-04-13 00:13:56,963 INFO L78 Accepts]: Start accepts. Automaton has 62 states. Word has length 3343 [2018-04-13 00:13:56,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:13:56,967 INFO L225 Difference]: With dead ends: 801 [2018-04-13 00:13:56,967 INFO L226 Difference]: Without dead ends: 801 [2018-04-13 00:13:56,967 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2145 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=1890, Invalid=6300, Unknown=0, NotChecked=0, Total=8190 [2018-04-13 00:13:56,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 801 states. [2018-04-13 00:13:56,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 801 to 652. [2018-04-13 00:13:56,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 652 states. [2018-04-13 00:13:56,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 652 states to 652 states and 1093 transitions. [2018-04-13 00:13:56,977 INFO L78 Accepts]: Start accepts. Automaton has 652 states and 1093 transitions. Word has length 3343 [2018-04-13 00:13:56,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:13:56,978 INFO L459 AbstractCegarLoop]: Abstraction has 652 states and 1093 transitions. [2018-04-13 00:13:56,978 INFO L460 AbstractCegarLoop]: Interpolant automaton has 62 states. [2018-04-13 00:13:56,978 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 1093 transitions. [2018-04-13 00:13:57,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3362 [2018-04-13 00:13:57,019 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:13:57,020 INFO L355 BasicCegarLoop]: trace histogram [525, 493, 493, 493, 493, 493, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:13:57,020 INFO L408 AbstractCegarLoop]: === Iteration 235 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:13:57,020 INFO L82 PathProgramCache]: Analyzing trace with hash -1973936995, now seen corresponding path program 224 times [2018-04-13 00:13:57,020 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:13:57,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:13:57,221 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:14:01,383 INFO L134 CoverageAnalysis]: Checked inductivity of 765236 backedges. 81486 proven. 7661 refuted. 0 times theorem prover too weak. 676089 trivial. 0 not checked. [2018-04-13 00:14:01,383 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:14:01,383 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [64] total 64 [2018-04-13 00:14:01,383 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:14:01,385 INFO L134 CoverageAnalysis]: Checked inductivity of 30888 backedges. 2663 proven. 179 refuted. 0 times theorem prover too weak. 28046 trivial. 0 not checked. [2018-04-13 00:14:01,385 INFO L182 omatonBuilderFactory]: Interpolants [317572#(<= 17 main_~i~1), 317573#(<= 18 main_~i~1), 317574#(<= 19 main_~i~1), 317575#(<= 20 main_~i~1), 317568#(<= 13 main_~i~1), 317569#(<= 14 main_~i~1), 317570#(<= 15 main_~i~1), 317571#(<= 16 main_~i~1), 317580#(<= 25 main_~i~1), 317581#(<= 26 main_~i~1), 317582#(<= 27 main_~i~1), 317583#(<= 28 main_~i~1), 317576#(<= 21 main_~i~1), 317577#(<= 22 main_~i~1), 317578#(<= 23 main_~i~1), 317579#(<= 24 main_~i~1), 317588#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 317589#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 317590#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 317591#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 317584#(<= 29 main_~i~1), 317585#(<= 30 main_~i~1), 317586#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 317587#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 317596#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 317597#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 317598#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 317599#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 317592#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 317593#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 317594#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 317595#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 317604#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 317605#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 317606#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 317607#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 317600#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 317601#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 317602#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 317603#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 317612#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 26)), 317613#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 27)), 317614#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 28)), 317615#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 29)), 317608#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 317609#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 317610#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 317611#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 317616#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 29), 317556#(<= 1 main_~i~1), 317557#(<= 2 main_~i~1), 317558#(<= 3 main_~i~1), 317559#(<= 4 main_~i~1), 317553#true, 317554#false, 317555#(<= 0 main_~i~1), 317564#(<= 9 main_~i~1), 317565#(<= 10 main_~i~1), 317566#(<= 11 main_~i~1), 317567#(<= 12 main_~i~1), 317560#(<= 5 main_~i~1), 317561#(<= 6 main_~i~1), 317562#(<= 7 main_~i~1), 317563#(<= 8 main_~i~1)] [2018-04-13 00:14:01,397 INFO L134 CoverageAnalysis]: Checked inductivity of 765236 backedges. 81486 proven. 7661 refuted. 0 times theorem prover too weak. 676089 trivial. 0 not checked. [2018-04-13 00:14:01,398 INFO L442 AbstractCegarLoop]: Interpolant automaton has 64 states [2018-04-13 00:14:01,398 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2018-04-13 00:14:01,398 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=1025, Invalid=3007, Unknown=0, NotChecked=0, Total=4032 [2018-04-13 00:14:01,398 INFO L87 Difference]: Start difference. First operand 652 states and 1093 transitions. Second operand 64 states. [2018-04-13 00:14:04,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:14:04,094 INFO L93 Difference]: Finished difference Result 815 states and 1254 transitions. [2018-04-13 00:14:04,094 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 93 states. [2018-04-13 00:14:04,094 INFO L78 Accepts]: Start accepts. Automaton has 64 states. Word has length 3361 [2018-04-13 00:14:04,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:14:04,096 INFO L225 Difference]: With dead ends: 815 [2018-04-13 00:14:04,096 INFO L226 Difference]: Without dead ends: 815 [2018-04-13 00:14:04,097 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 92 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2294 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=2015, Invalid=6727, Unknown=0, NotChecked=0, Total=8742 [2018-04-13 00:14:04,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 815 states. [2018-04-13 00:14:04,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 815 to 661. [2018-04-13 00:14:04,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 661 states. [2018-04-13 00:14:04,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 661 states to 661 states and 1130 transitions. [2018-04-13 00:14:04,104 INFO L78 Accepts]: Start accepts. Automaton has 661 states and 1130 transitions. Word has length 3361 [2018-04-13 00:14:04,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:14:04,105 INFO L459 AbstractCegarLoop]: Abstraction has 661 states and 1130 transitions. [2018-04-13 00:14:04,105 INFO L460 AbstractCegarLoop]: Interpolant automaton has 64 states. [2018-04-13 00:14:04,105 INFO L276 IsEmpty]: Start isEmpty. Operand 661 states and 1130 transitions. [2018-04-13 00:14:04,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3374 [2018-04-13 00:14:04,145 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:14:04,145 INFO L355 BasicCegarLoop]: trace histogram [527, 495, 495, 495, 495, 495, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:14:04,145 INFO L408 AbstractCegarLoop]: === Iteration 236 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:14:04,145 INFO L82 PathProgramCache]: Analyzing trace with hash 68852589, now seen corresponding path program 225 times [2018-04-13 00:14:04,146 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:14:04,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:14:04,321 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:14:08,457 INFO L134 CoverageAnalysis]: Checked inductivity of 771286 backedges. 89685 proven. 2670 refuted. 0 times theorem prover too weak. 678931 trivial. 0 not checked. [2018-04-13 00:14:08,457 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:14:08,457 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [66] total 66 [2018-04-13 00:14:08,457 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:14:08,458 INFO L134 CoverageAnalysis]: Checked inductivity of 30888 backedges. 2845 proven. 0 refuted. 0 times theorem prover too weak. 28043 trivial. 0 not checked. [2018-04-13 00:14:08,458 INFO L182 omatonBuilderFactory]: Interpolants [319156#(<= 1 main_~i~1), 319157#(<= 2 main_~i~1), 319158#(<= 3 main_~i~1), 319159#(<= 4 main_~i~1), 319153#true, 319154#false, 319155#(<= 0 main_~i~1), 319164#(<= 9 main_~i~1), 319165#(<= 10 main_~i~1), 319166#(<= 11 main_~i~1), 319167#(<= 12 main_~i~1), 319160#(<= 5 main_~i~1), 319161#(<= 6 main_~i~1), 319162#(<= 7 main_~i~1), 319163#(<= 8 main_~i~1), 319172#(<= 17 main_~i~1), 319173#(<= 18 main_~i~1), 319174#(<= 19 main_~i~1), 319175#(<= 20 main_~i~1), 319168#(<= 13 main_~i~1), 319169#(<= 14 main_~i~1), 319170#(<= 15 main_~i~1), 319171#(<= 16 main_~i~1), 319180#(<= 25 main_~i~1), 319181#(<= 26 main_~i~1), 319182#(<= 27 main_~i~1), 319183#(<= 28 main_~i~1), 319176#(<= 21 main_~i~1), 319177#(<= 22 main_~i~1), 319178#(<= 23 main_~i~1), 319179#(<= 24 main_~i~1), 319188#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 1)), 319189#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 2)), 319190#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 3)), 319191#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 4)), 319184#(<= 29 main_~i~1), 319185#(<= 30 main_~i~1), 319186#(<= 31 main_~i~1), 319187#(and (<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0)), 319196#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 9)), 319197#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 10)), 319198#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 11)), 319199#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 12)), 319192#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 5)), 319193#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 6)), 319194#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 7)), 319195#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 8)), 319204#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 17)), 319205#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 18)), 319206#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 19)), 319207#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 20)), 319200#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 13)), 319201#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 14)), 319202#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 15)), 319203#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 16)), 319212#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 25)), 319213#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 26)), 319214#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 27)), 319215#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 28)), 319208#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 21)), 319209#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 22)), 319210#(<= (+ |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 23)), 319211#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 24)), 319216#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 29)), 319217#(<= (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size|) (+ __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~size 30)), 319218#(<= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#in~size| 30)] [2018-04-13 00:14:08,471 INFO L134 CoverageAnalysis]: Checked inductivity of 771286 backedges. 89685 proven. 2670 refuted. 0 times theorem prover too weak. 678931 trivial. 0 not checked. [2018-04-13 00:14:08,471 INFO L442 AbstractCegarLoop]: Interpolant automaton has 66 states [2018-04-13 00:14:08,472 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2018-04-13 00:14:08,472 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=1090, Invalid=3200, Unknown=0, NotChecked=0, Total=4290 [2018-04-13 00:14:08,472 INFO L87 Difference]: Start difference. First operand 661 states and 1130 transitions. Second operand 66 states. [2018-04-13 00:14:11,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:14:11,286 INFO L93 Difference]: Finished difference Result 829 states and 1296 transitions. [2018-04-13 00:14:11,287 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 96 states. [2018-04-13 00:14:11,287 INFO L78 Accepts]: Start accepts. Automaton has 66 states. Word has length 3373 [2018-04-13 00:14:11,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:14:11,291 INFO L225 Difference]: With dead ends: 829 [2018-04-13 00:14:11,291 INFO L226 Difference]: Without dead ends: 829 [2018-04-13 00:14:11,292 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2448 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=2144, Invalid=7168, Unknown=0, NotChecked=0, Total=9312 [2018-04-13 00:14:11,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 829 states. [2018-04-13 00:14:11,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 829 to 670. [2018-04-13 00:14:11,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 670 states. [2018-04-13 00:14:11,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 670 states to 670 states and 1168 transitions. [2018-04-13 00:14:11,302 INFO L78 Accepts]: Start accepts. Automaton has 670 states and 1168 transitions. Word has length 3373 [2018-04-13 00:14:11,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:14:11,303 INFO L459 AbstractCegarLoop]: Abstraction has 670 states and 1168 transitions. [2018-04-13 00:14:11,303 INFO L460 AbstractCegarLoop]: Interpolant automaton has 66 states. [2018-04-13 00:14:11,303 INFO L276 IsEmpty]: Start isEmpty. Operand 670 states and 1168 transitions. [2018-04-13 00:14:11,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3380 [2018-04-13 00:14:11,345 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:14:11,345 INFO L355 BasicCegarLoop]: trace histogram [528, 496, 496, 496, 496, 496, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:14:11,346 INFO L408 AbstractCegarLoop]: === Iteration 237 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:14:11,346 INFO L82 PathProgramCache]: Analyzing trace with hash 186342773, now seen corresponding path program 226 times [2018-04-13 00:14:11,346 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:14:11,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:14:11,533 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:14:16,078 INFO L134 CoverageAnalysis]: Checked inductivity of 774320 backedges. 2610 proven. 1577 refuted. 0 times theorem prover too weak. 770133 trivial. 0 not checked. [2018-04-13 00:14:16,078 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-13 00:14:16,078 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [40] total 40 [2018-04-13 00:14:16,078 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:14:16,080 INFO L134 CoverageAnalysis]: Checked inductivity of 30885 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 30885 trivial. 0 not checked. [2018-04-13 00:14:16,080 INFO L182 omatonBuilderFactory]: Interpolants [320780#true, 320781#false, 320782#(= main_~i~1 0), 320783#(= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_~i~0 0), 320788#(and (= (select main_~b~0 0) 0) (<= 2 main_~i~1)), 320789#(and (<= 3 main_~i~1) (= (select main_~b~0 0) 0)), 320790#(and (<= 4 main_~i~1) (= (select main_~b~0 0) 0)), 320791#(and (<= 5 main_~i~1) (= (select main_~b~0 0) 0)), 320784#(= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__foo_#res| 0), 320785#(and (= |main_#t~ret3| 0) (= main_~i~1 0)), 320786#(and (= main_~i~1 0) (= (select main_~b~0 main_~i~1) 0)), 320787#(and (<= 1 main_~i~1) (= (select main_~b~0 0) 0)), 320796#(and (<= 10 main_~i~1) (= (select main_~b~0 0) 0)), 320797#(and (<= 11 main_~i~1) (= (select main_~b~0 0) 0)), 320798#(and (<= 12 main_~i~1) (= (select main_~b~0 0) 0)), 320799#(and (<= 13 main_~i~1) (= (select main_~b~0 0) 0)), 320792#(and (<= 6 main_~i~1) (= (select main_~b~0 0) 0)), 320793#(and (<= 7 main_~i~1) (= (select main_~b~0 0) 0)), 320794#(and (<= 8 main_~i~1) (= (select main_~b~0 0) 0)), 320795#(and (= (select main_~b~0 0) 0) (<= 9 main_~i~1)), 320804#(and (<= 18 main_~i~1) (= (select main_~b~0 0) 0)), 320805#(and (<= 19 main_~i~1) (= (select main_~b~0 0) 0)), 320806#(and (<= 20 main_~i~1) (= (select main_~b~0 0) 0)), 320807#(and (<= 21 main_~i~1) (= (select main_~b~0 0) 0)), 320800#(and (<= 14 main_~i~1) (= (select main_~b~0 0) 0)), 320801#(and (<= 15 main_~i~1) (= (select main_~b~0 0) 0)), 320802#(and (= (select main_~b~0 0) 0) (<= 16 main_~i~1)), 320803#(and (<= 17 main_~i~1) (= (select main_~b~0 0) 0)), 320812#(and (<= 26 main_~i~1) (= (select main_~b~0 0) 0)), 320813#(and (<= 27 main_~i~1) (= (select main_~b~0 0) 0)), 320814#(and (<= 28 main_~i~1) (= (select main_~b~0 0) 0)), 320815#(and (<= 29 main_~i~1) (= (select main_~b~0 0) 0)), 320808#(and (<= 22 main_~i~1) (= (select main_~b~0 0) 0)), 320809#(and (<= 23 main_~i~1) (= (select main_~b~0 0) 0)), 320810#(and (<= 24 main_~i~1) (= (select main_~b~0 0) 0)), 320811#(and (<= 25 main_~i~1) (= (select main_~b~0 0) 0)), 320816#(and (<= 30 main_~i~1) (= (select main_~b~0 0) 0)), 320817#(and (= (select main_~b~0 0) 0) (not (= main_~i~1 0))), 320818#(= (select main_~b~0 0) 0), 320819#(= main_~i~1 (select main_~b~0 main_~i~1))] [2018-04-13 00:14:16,091 INFO L134 CoverageAnalysis]: Checked inductivity of 774320 backedges. 2610 proven. 1577 refuted. 0 times theorem prover too weak. 770133 trivial. 0 not checked. [2018-04-13 00:14:16,092 INFO L442 AbstractCegarLoop]: Interpolant automaton has 40 states [2018-04-13 00:14:16,092 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2018-04-13 00:14:16,092 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=577, Invalid=983, Unknown=0, NotChecked=0, Total=1560 [2018-04-13 00:14:16,092 INFO L87 Difference]: Start difference. First operand 670 states and 1168 transitions. Second operand 40 states. [2018-04-13 00:14:17,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:14:17,084 INFO L93 Difference]: Finished difference Result 815 states and 1283 transitions. [2018-04-13 00:14:17,084 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2018-04-13 00:14:17,085 INFO L78 Accepts]: Start accepts. Automaton has 40 states. Word has length 3379 [2018-04-13 00:14:17,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:14:17,088 INFO L225 Difference]: With dead ends: 815 [2018-04-13 00:14:17,088 INFO L226 Difference]: Without dead ends: 815 [2018-04-13 00:14:17,089 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 740 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=1631, Invalid=3339, Unknown=0, NotChecked=0, Total=4970 [2018-04-13 00:14:17,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 815 states. [2018-04-13 00:14:17,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 815 to 670. [2018-04-13 00:14:17,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 670 states. [2018-04-13 00:14:17,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 670 states to 670 states and 1167 transitions. [2018-04-13 00:14:17,098 INFO L78 Accepts]: Start accepts. Automaton has 670 states and 1167 transitions. Word has length 3379 [2018-04-13 00:14:17,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:14:17,099 INFO L459 AbstractCegarLoop]: Abstraction has 670 states and 1167 transitions. [2018-04-13 00:14:17,099 INFO L460 AbstractCegarLoop]: Interpolant automaton has 40 states. [2018-04-13 00:14:17,099 INFO L276 IsEmpty]: Start isEmpty. Operand 670 states and 1167 transitions. [2018-04-13 00:14:17,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3385 [2018-04-13 00:14:17,138 INFO L347 BasicCegarLoop]: Found error trace [2018-04-13 00:14:17,138 INFO L355 BasicCegarLoop]: trace histogram [528, 496, 496, 496, 496, 496, 33, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-13 00:14:17,138 INFO L408 AbstractCegarLoop]: === Iteration 238 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr0AssertViolationARRAY_INDEX, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_c__fooErr2RequiresViolation, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-13 00:14:17,139 INFO L82 PathProgramCache]: Analyzing trace with hash -1791303284, now seen corresponding path program 1 times [2018-04-13 00:14:17,139 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-13 00:14:17,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-13 00:14:17,566 WARN L250 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-13 00:14:21,275 INFO L134 CoverageAnalysis]: Checked inductivity of 774324 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 774324 trivial. 0 not checked. [2018-04-13 00:14:21,275 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-13 00:14:21,276 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-04-13 00:14:21,276 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-13 00:14:21,277 INFO L134 CoverageAnalysis]: Checked inductivity of 30885 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 30885 trivial. 0 not checked. [2018-04-13 00:14:21,277 INFO L182 omatonBuilderFactory]: Interpolants [322368#false, 322369#(= |#valid| |old(#valid)|), 322370#(= (store |#valid| |main_~#mask~0.base| 0) |old(#valid)|), 322367#true] [2018-04-13 00:14:21,288 INFO L134 CoverageAnalysis]: Checked inductivity of 774324 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 774324 trivial. 0 not checked. [2018-04-13 00:14:21,288 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-04-13 00:14:21,288 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-04-13 00:14:21,288 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-04-13 00:14:21,288 INFO L87 Difference]: Start difference. First operand 670 states and 1167 transitions. Second operand 4 states. [2018-04-13 00:14:21,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-13 00:14:21,313 INFO L93 Difference]: Finished difference Result 669 states and 1166 transitions. [2018-04-13 00:14:21,313 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-13 00:14:21,313 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 3384 [2018-04-13 00:14:21,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-13 00:14:21,314 INFO L225 Difference]: With dead ends: 669 [2018-04-13 00:14:21,315 INFO L226 Difference]: Without dead ends: 0 [2018-04-13 00:14:21,315 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-04-13 00:14:21,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2018-04-13 00:14:21,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2018-04-13 00:14:21,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2018-04-13 00:14:21,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2018-04-13 00:14:21,315 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 3384 [2018-04-13 00:14:21,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-13 00:14:21,315 INFO L459 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-04-13 00:14:21,315 INFO L460 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-04-13 00:14:21,315 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2018-04-13 00:14:21,315 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-04-13 00:14:21,319 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.04 12:14:21 BoogieIcfgContainer [2018-04-13 00:14:21,319 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-04-13 00:14:21,320 INFO L168 Benchmark]: Toolchain (without parser) took 418630.28 ms. Allocated memory was 412.6 MB in the beginning and 3.6 GB in the end (delta: 3.2 GB). Free memory was 355.0 MB in the beginning and 1.9 GB in the end (delta: -1.5 GB). Peak memory consumption was 1.7 GB. Max. memory is 5.3 GB. [2018-04-13 00:14:21,321 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 412.6 MB. Free memory is still 372.9 MB. There was no memory consumed. Max. memory is 5.3 GB. [2018-04-13 00:14:21,321 INFO L168 Benchmark]: CACSL2BoogieTranslator took 154.60 ms. Allocated memory is still 412.6 MB. Free memory was 354.3 MB in the beginning and 344.3 MB in the end (delta: 10.0 MB). Peak memory consumption was 10.0 MB. Max. memory is 5.3 GB. [2018-04-13 00:14:21,321 INFO L168 Benchmark]: Boogie Preprocessor took 23.77 ms. Allocated memory is still 412.6 MB. Free memory was 344.3 MB in the beginning and 343.0 MB in the end (delta: 1.4 MB). Peak memory consumption was 1.4 MB. Max. memory is 5.3 GB. [2018-04-13 00:14:21,322 INFO L168 Benchmark]: RCFGBuilder took 235.21 ms. Allocated memory was 412.6 MB in the beginning and 629.7 MB in the end (delta: 217.1 MB). Free memory was 343.0 MB in the beginning and 592.1 MB in the end (delta: -249.1 MB). Peak memory consumption was 25.9 MB. Max. memory is 5.3 GB. [2018-04-13 00:14:21,322 INFO L168 Benchmark]: TraceAbstraction took 418214.11 ms. Allocated memory was 629.7 MB in the beginning and 3.6 GB in the end (delta: 3.0 GB). Free memory was 592.1 MB in the beginning and 1.9 GB in the end (delta: -1.3 GB). Peak memory consumption was 1.7 GB. Max. memory is 5.3 GB. [2018-04-13 00:14:21,323 INFO L344 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 412.6 MB. Free memory is still 372.9 MB. There was no memory consumed. Max. memory is 5.3 GB. * CACSL2BoogieTranslator took 154.60 ms. Allocated memory is still 412.6 MB. Free memory was 354.3 MB in the beginning and 344.3 MB in the end (delta: 10.0 MB). Peak memory consumption was 10.0 MB. Max. memory is 5.3 GB. * Boogie Preprocessor took 23.77 ms. Allocated memory is still 412.6 MB. Free memory was 344.3 MB in the beginning and 343.0 MB in the end (delta: 1.4 MB). Peak memory consumption was 1.4 MB. Max. memory is 5.3 GB. * RCFGBuilder took 235.21 ms. Allocated memory was 412.6 MB in the beginning and 629.7 MB in the end (delta: 217.1 MB). Free memory was 343.0 MB in the beginning and 592.1 MB in the end (delta: -249.1 MB). Peak memory consumption was 25.9 MB. Max. memory is 5.3 GB. * TraceAbstraction took 418214.11 ms. Allocated memory was 629.7 MB in the beginning and 3.6 GB in the end (delta: 3.0 GB). Free memory was 592.1 MB in the beginning and 1.9 GB in the end (delta: -1.3 GB). Peak memory consumption was 1.7 GB. Max. memory is 5.3 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 16]: array index is always in bounds For all program executions holds that array index is always in bounds at this location - PositiveResult [Line: 16]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 16]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 30]: array index is always in bounds For all program executions holds that array index is always in bounds at this location - PositiveResult [Line: 21]: all allocated memory was freed For all program executions holds that all allocated memory was freed at this location - PositiveResult [Line: 27]: array index is always in bounds For all program executions holds that array index is always in bounds at this location - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 46 locations, 6 error locations. SAFE Result, 418.1s OverallTime, 238 OverallIterations, 528 TraceHistogramMax, 94.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 10089 SDtfs, 62194 SDslu, 102740 SDs, 0 SdLazy, 154302 SolverSat, 19415 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 49.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 8838 GetRequests, 504 SyntacticMatches, 2 SemanticMatches, 8332 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63554 ImplicationChecksByTransitivity, 59.2s Time, 1.1s BasicInterpolantAutomatonTime, BiggestAbstraction: size=670occurred in iteration=236, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 53389447/55111885 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 3.4s AutomataMinimizationTime, 238 MinimizatonAttempts, 105009 StatesRemovedByMinimization, 236 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 1.9s SsaConstructionTime, 16.9s SatisfiabilityAnalysisTime, 78.0s InterpolantComputationTime, 390592 NumberOfCodeBlocks, 390592 NumberOfCodeBlocksAsserted, 238 NumberOfCheckSat, 390354 ConstructedInterpolants, 0 QuantifiedInterpolants, 1133369749 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 238 InterpolantComputations, 6 PerfectInterpolantSequences, 53389447/55111885 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Written .csv to /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/ArraysOfVariableLength5_true-valid-memsafety.c_svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf_AutomizerC.xml/Csv-Benchmark-0-2018-04-13_00-14-21-328.csv Written .csv to /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/ArraysOfVariableLength5_true-valid-memsafety.c_svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf_AutomizerC.xml/Csv-TraceAbstractionBenchmarks-0-2018-04-13_00-14-21-328.csv Received shutdown request...