void abort() { }; void assume_abort_if_not(int cond) { if(!cond) {abort();} } /*@ requires ((cond != 0)) && (cond != 0); ensures ((cond != 0)) && (1); @*/ void __VERIFIER_assert(int cond) { if (!(cond)) { ERROR: {/*@ assert(0); */;abort();} } return; } int __VERIFIER_nondet_int(); int main() { int len; int i; int j; int bufsize; bufsize = __VERIFIER_nondet_int(); if (bufsize < 0) return 0; len = __VERIFIER_nondet_int(); int limit = bufsize - 4; /*@ loop invariant (((0 <= i) && (((long long) limit + 4) <= bufsize))); @*/ for (i = 0; i < len; ) { /*@ loop invariant ((((0 <= j) && (0 <= i)) && (((long long) limit + 4) <= bufsize))); @*/ for (j = 0; i < len && j < limit; ){ if (i + 1 < len){ __VERIFIER_assert(i+1