/* Geometric Series computes x = sum(z^k)[k=0..k-1], y = z^(k-1) */ void abort() { }; extern void abort(); extern int __VERIFIER_nondet_int(); /*@ requires (1); ensures ((cond != 0)); @*/ void assume_abort_if_not(int cond) { if(!cond) {abort();} } /*@ requires ((1 <= cond)) && (cond != 0); ensures ((1 <= cond)) && (1); @*/ void __VERIFIER_assert(int cond) { if (!(cond)) { ERROR: {/*@ assert(0); */;} } return; } int main() { int z, a, k; unsigned long long x, y, c, az; z = __VERIFIER_nondet_int(); assume_abort_if_not(z>=0 && z<=20); a = __VERIFIER_nondet_int(); assume_abort_if_not(a>=0 && a<=20); k = __VERIFIER_nondet_int(); assume_abort_if_not(k>=0 && k<=20); x = a; y = 1; c = 1; az = (long long) a * z; /*@ loop invariant (((((((a <= 20) && (z <= 20)) && (((((((long long) a * z) + ((__int128) ((long long) z * z) * x)) + ((((__int128) 18446744073709551615U * z) * y) * az)) + (((__int128) 18446744073709551615U * z) * x)) % ((unsigned __int128) 1 << 64)) == 0)) && (0 <= a)) && (((((((__int128) z * x) + (((unsigned __int128) 18446744073709551615U * y) * az)) + a) + ((unsigned __int128) 18446744073709551615U * x)) % ((unsigned __int128) 1 << 64)) == 0)) && (0 <= z))); @*/ while (1) { __VERIFIER_assert(z*x - x + a - az*y == 0); if (!(c < k)) break; c = c + 1; x = x * z + a; y = y * z; } __VERIFIER_assert(z*x - x + a - az*y == 0); return x; }