void abort() { }; extern int __VERIFIER_nondet_int(); /*@ requires (1); ensures ((cond != 0)); @*/ void assume_abort_if_not(int cond) { if(!cond) {abort();} } /*@ requires ((1 <= cond)) && (cond != 0); ensures ((1 <= cond)) && (1); @*/ void __VERIFIER_assert(int cond) { if (!(cond)) { ERROR: {/*@ assert(0); */;} } return; } int main() { int x, y; long long a, b, p, q; x = __VERIFIER_nondet_int(); y = __VERIFIER_nondet_int(); assume_abort_if_not(y >= 1); a = x; b = y; p = 1; q = 0; /*@ loop invariant ((((q + (((__int128) b * a) * p)) == ((long long) y * x)) && (1 <= y))); @*/ while (1) { __VERIFIER_assert(q + a * b * p == (long long) x * y); if (!(a != 0 && b != 0)) break; if (a % 2 == 0 && b % 2 == 0) { a = a / 2; b = b / 2; p = 4 * p; } else if (a % 2 == 1 && b % 2 == 0) { a = a - 1; q = q + b * p; } else if (a % 2 == 0 && b % 2 == 1) { b = b - 1; q = q + a * p; } else { a = a - 1; b = b - 1; q = q + (a + b + 1) * p; /*fix a bug here--- was (a+b-1)*/ } } __VERIFIER_assert(q == (long long) x * y); __VERIFIER_assert(a * b == 0); return 0; }