void abort() { }; extern int __VERIFIER_nondet_int(); /*@ requires (1); ensures ((cond != 0)); @*/ void assume_abort_if_not(int cond) { if(!cond) {abort();} } /*@ requires ((1 <= cond)) && (cond != 0); ensures ((1 <= cond)) && (1); @*/ void __VERIFIER_assert(int cond) { if (!(cond)) { ERROR: {/*@ assert(0); */;} } return; } int main() { long long a, b, p, q, r, s; int x, y; x = __VERIFIER_nondet_int(); assume_abort_if_not(x>=0 && x<=2); y = __VERIFIER_nondet_int(); assume_abort_if_not(y>=0 && y<=2); assume_abort_if_not(x >= 1); assume_abort_if_not(y >= 1); a = x; b = y; p = 1; q = 0; r = 0; s = 1; /*@ loop invariant (((((((((((((r == 0) && (y <= 2)) && (s == 1)) && (0 <= x)) && (b == y)) && (q == 0)) && (1 <= y)) && (a == x)) && (x <= 2)) && (p == 1)) || (((((((((((__int128) a + ((long long) y * 2)) == ((__int128) b + x)) && (((__int128) r + 1) == 0)) && (s == 1)) && (1 <= a)) && (b == y)) && (q == 0)) && (1 <= y)) && (x <= 2)) && (p == 1))) || ((((((((((r == 0) && (a <= 1)) && (b == (((__int128) q * x) + ((__int128) y * s)))) && (y <= 2)) && (s == 1)) && (0 <= x)) && (1 <= b)) && (1 <= y)) && (a == x)) && (p == 1)))); @*/ while (1) { __VERIFIER_assert(1 == p * s - r * q); __VERIFIER_assert(a == y * r + x * p); __VERIFIER_assert(b == x * q + y * s); if (!(a != b)) break; if (a > b) { a = a - b; p = p - q; r = r - s; } else { b = b - a; q = q - p; s = s - r; } } __VERIFIER_assert(a - b == 0); __VERIFIER_assert(p*x + r*y - b == 0); __VERIFIER_assert(q*r - p*s + 1 == 0); __VERIFIER_assert(q*x + s*y - b == 0); return 0; }