./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/nla-digbench-scaling/divbin_valuebound1.i --full-output --witness-type correctness_witness --validate ../results/automizer-verification-files/SV-COMP24_unreach-call/divbin_valuebound1.yml/witness-2.1.yml --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fb1cb0b9 Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/referee/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/referee/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/referee/data -tc /storage/repos/certificate-witnesses-artifact/referee/config/RefereeReachWitnessValidation.xml -i ../sv-benchmarks/c/nla-digbench-scaling/divbin_valuebound1.i ../results/automizer-verification-files/SV-COMP24_unreach-call/divbin_valuebound1.yml/witness-2.1.yml -s /storage/repos/certificate-witnesses-artifact/referee/config/svcomp-Reach-32bit-Referee_Default.epf --cacsl2boogietranslator.entry.function main --traceabstraction.positions.where.we.compute.the.hoare.annotation None --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-fb1cb0b-m [2024-09-25 11:47:19,288 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-25 11:47:19,384 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/referee/config/svcomp-Reach-32bit-Referee_Default.epf [2024-09-25 11:47:19,387 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-25 11:47:19,391 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-25 11:47:19,414 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-25 11:47:19,414 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-25 11:47:19,414 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-25 11:47:19,415 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-25 11:47:19,418 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-25 11:47:19,418 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-25 11:47:19,418 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-25 11:47:19,418 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-25 11:47:19,419 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-25 11:47:19,420 INFO L153 SettingsManager]: * Use SBE=true [2024-09-25 11:47:19,420 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-25 11:47:19,420 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-25 11:47:19,420 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-25 11:47:19,420 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-25 11:47:19,420 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-25 11:47:19,421 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-25 11:47:19,421 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-25 11:47:19,421 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-25 11:47:19,421 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-25 11:47:19,422 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-25 11:47:19,422 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-25 11:47:19,423 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-25 11:47:19,423 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-25 11:47:19,423 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-25 11:47:19,423 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-25 11:47:19,423 INFO L153 SettingsManager]: * Future-live optimization=false [2024-09-25 11:47:19,424 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-25 11:47:19,424 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-25 11:47:19,424 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:47:19,424 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-25 11:47:19,425 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-25 11:47:19,425 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-25 11:47:19,425 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-25 11:47:19,426 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-25 11:47:19,426 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-25 11:47:19,426 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-25 11:47:19,427 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-25 11:47:19,427 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-25 11:47:19,428 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/referee/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> None [2024-09-25 11:47:19,589 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-25 11:47:19,603 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-25 11:47:19,604 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-25 11:47:19,605 INFO L270 PluginConnector]: Initializing Witness Parser... [2024-09-25 11:47:19,606 INFO L274 PluginConnector]: Witness Parser initialized [2024-09-25 11:47:19,606 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/referee/../results/automizer-verification-files/SV-COMP24_unreach-call/divbin_valuebound1.yml/witness-2.1.yml [2024-09-25 11:47:19,670 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-25 11:47:19,671 INFO L274 PluginConnector]: CDTParser initialized [2024-09-25 11:47:19,672 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/referee/../sv-benchmarks/c/nla-digbench-scaling/divbin_valuebound1.i [2024-09-25 11:47:21,111 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-25 11:47:21,236 INFO L384 CDTParser]: Found 1 translation units. [2024-09-25 11:47:21,236 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/divbin_valuebound1.i [2024-09-25 11:47:21,242 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/referee/data/612692ffa/a61a17ed06d242be8dac943e35930447/FLAG554be31c5 [2024-09-25 11:47:21,659 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/referee/data/612692ffa/a61a17ed06d242be8dac943e35930447 [2024-09-25 11:47:21,659 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-25 11:47:21,660 INFO L133 ToolchainWalker]: Walking toolchain with 4 elements. [2024-09-25 11:47:21,661 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-25 11:47:21,661 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-25 11:47:21,666 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-25 11:47:21,666 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 25.09 11:47:19" (1/2) ... [2024-09-25 11:47:21,667 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@36105316 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 25.09 11:47:21, skipping insertion in model container [2024-09-25 11:47:21,667 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 25.09 11:47:19" (1/2) ... [2024-09-25 11:47:21,668 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@3b1adc75 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 25.09 11:47:21, skipping insertion in model container [2024-09-25 11:47:21,668 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:47:21" (2/2) ... [2024-09-25 11:47:21,669 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@36105316 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21, skipping insertion in model container [2024-09-25 11:47:21,669 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:47:21" (2/2) ... [2024-09-25 11:47:21,675 INFO L93 nessWitnessExtractor]: Found the following entries in the witness: [2024-09-25 11:47:21,675 INFO L1541 ArrayList]: Loop invariant at [L41-L50] ((((((((B == 1) && (b == 1)) && (r <= 0)) && (r == A)) && (q == 0)) || ((((0 <= 0) && (0 <= 0)) && (A == ((r + ((unsigned long long) b * q)) % 4294967296))) && (B == b))) || ((((((B == 1) && (r == A)) && (0 <= (2 * (((b / 2) + ((long long) -1 * B)) / 4294967296)))) && (A <= 1)) && (b <= ((long long) B * 2))) && (q == 0))) || (((((B == 1) && (b == 1)) && (r <= 0)) && (A == (((long long) r + 1) % 4294967296))) && (q == 1))) [2024-09-25 11:47:21,676 INFO L1541 ArrayList]: Loop invariant at [L37-L40] (((((((B == 1) && (r == A)) && (0 <= (2 * (((b / 2) + ((long long) -1 * B)) / 4294967296)))) && (A <= 1)) && (b <= ((long long) B * 2))) && (q == 0)) || ((((((b == 1) && (r == A)) && (0 <= 0)) && (A <= 1)) && (B == b)) && (q == 0))) [2024-09-25 11:47:21,676 INFO L1541 ArrayList]: Function contract at [L18]: requires (1 <= cond), ensures (1 <= cond) [2024-09-25 11:47:21,676 INFO L1541 ArrayList]: Function contract at [L15]: requires null, ensures (cond != 0) [2024-09-25 11:47:21,689 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-25 11:47:21,805 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/divbin_valuebound1.i[950,963] [2024-09-25 11:47:21,818 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:47:21,825 INFO L200 MainTranslator]: Completed pre-run Start Parsing Global Start Parsing Global Start Parsing Global [2024-09-25 11:47:21,854 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/divbin_valuebound1.i[950,963] Start Parsing Local Start Parsing Local [2024-09-25 11:47:21,868 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:47:21,879 INFO L204 MainTranslator]: Completed translation [2024-09-25 11:47:21,880 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21 WrapperNode [2024-09-25 11:47:21,880 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-25 11:47:21,881 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-25 11:47:21,881 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-25 11:47:21,881 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-25 11:47:21,890 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,890 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,900 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,913 WARN L109 MemorySlicer]: Omit memory slicing because it failed with the following exception: Unsupported: Procedure assume_abort_if_not is not part of the Ultimate memory model but has specification other that is not a ModifiesSpecification [2024-09-25 11:47:21,916 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,916 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,919 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,925 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,929 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,929 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,934 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-25 11:47:21,935 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-25 11:47:21,935 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-25 11:47:21,935 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-25 11:47:21,936 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (1/1) ... [2024-09-25 11:47:21,940 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:47:21,945 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/referee/z3 [2024-09-25 11:47:21,965 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/referee/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-25 11:47:21,974 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/referee/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-25 11:47:22,004 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-25 11:47:22,004 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-25 11:47:22,005 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2024-09-25 11:47:22,006 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-09-25 11:47:22,006 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-25 11:47:22,006 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-25 11:47:22,006 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2024-09-25 11:47:22,006 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2024-09-25 11:47:22,006 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_perror_fail [2024-09-25 11:47:22,006 INFO L130 BoogieDeclarations]: Found specification of procedure __assert [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_uint [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-25 11:47:22,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-09-25 11:47:22,008 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-25 11:47:22,008 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2024-09-25 11:47:22,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2024-09-25 11:47:22,008 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-25 11:47:22,065 INFO L241 CfgBuilder]: Building ICFG [2024-09-25 11:47:22,067 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-25 11:47:22,287 WARN L782 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2024-09-25 11:47:22,304 INFO L290 CfgBuilder]: Performing block encoding [2024-09-25 11:47:22,326 INFO L312 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-25 11:47:22,327 INFO L317 CfgBuilder]: Removed 2 assume(true) statements. [2024-09-25 11:47:22,327 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:47:22 BoogieIcfgContainer [2024-09-25 11:47:22,327 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-25 11:47:22,328 INFO L112 PluginConnector]: ------------------------Referee---------------------------- [2024-09-25 11:47:22,328 INFO L270 PluginConnector]: Initializing Referee... [2024-09-25 11:47:22,328 INFO L274 PluginConnector]: Referee initialized [2024-09-25 11:47:22,329 INFO L184 PluginConnector]: Executing the observer RefereeObserver from plugin Referee for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 25.09 11:47:19" (1/4) ... [2024-09-25 11:47:22,330 INFO L204 PluginConnector]: Invalid model from Referee for observer de.uni_freiburg.informatik.ultimate.plugins.generator.referee.RefereeObserver@774e718d and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.referee CORRECTNESS_WITNESS 25.09 11:47:22, skipping insertion in model container [2024-09-25 11:47:22,330 INFO L184 PluginConnector]: Executing the observer RefereeObserver from plugin Referee for "CDTParser AST 25.09 11:47:21" (2/4) ... [2024-09-25 11:47:22,330 INFO L204 PluginConnector]: Invalid model from Referee for observer de.uni_freiburg.informatik.ultimate.plugins.generator.referee.RefereeObserver@774e718d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.referee AST 25.09 11:47:22, skipping insertion in model container [2024-09-25 11:47:22,330 INFO L184 PluginConnector]: Executing the observer RefereeObserver from plugin Referee for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:47:21" (3/4) ... [2024-09-25 11:47:22,330 INFO L204 PluginConnector]: Invalid model from Referee for observer de.uni_freiburg.informatik.ultimate.plugins.generator.referee.RefereeObserver@774e718d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.referee AST 25.09 11:47:22, skipping insertion in model container [2024-09-25 11:47:22,330 INFO L184 PluginConnector]: Executing the observer RefereeObserver from plugin Referee for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:47:22" (4/4) ... [2024-09-25 11:47:22,331 INFO L79 RefereeObserver]: Analyzing ICFG divbin_valuebound1.i [2024-09-25 11:47:22,335 INFO L113 InvariantChecker]: Found 2 loops. [2024-09-25 11:47:22,335 INFO L373 InvariantChecker]: Will check inductivity from ENTRY $Ultimate##0 to ERROR_LOC assume_abort_if_notErr0ENSURES_VIOLATIONPOST_CONDITION. Corresponding subgraph has 4 edges. [2024-09-25 11:47:22,336 INFO L373 InvariantChecker]: Will check inductivity from LOOP_HEAD L46-2 to ERROR_LOC mainErr2REQUIRES_VIOLATIONPRE_CONDITION. Corresponding subgraph has 3 edges. [2024-09-25 11:47:22,336 INFO L373 InvariantChecker]: Will check inductivity from LOOP_HEAD L46-2 to LOOP_INVARIANT_ERROR_LOC mainErr1ASSERT_VIOLATIONWITNESS_INVARIANT. Corresponding subgraph has 7 edges. [2024-09-25 11:47:22,336 INFO L373 InvariantChecker]: Will check inductivity from LOOP_HEAD L37-3 to LOOP_INVARIANT_ERROR_LOC mainErr1ASSERT_VIOLATIONWITNESS_INVARIANT. Corresponding subgraph has 6 edges. [2024-09-25 11:47:22,337 INFO L373 InvariantChecker]: Will check inductivity from ENTRY $Ultimate##0 to LOOP_INVARIANT_ERROR_LOC mainErr0ASSERT_VIOLATIONWITNESS_INVARIANT. Corresponding subgraph has 8 edges. [2024-09-25 11:47:22,337 INFO L373 InvariantChecker]: Will check inductivity from LOOP_HEAD L37-3 to LOOP_INVARIANT_ERROR_LOC mainErr0ASSERT_VIOLATIONWITNESS_INVARIANT. Corresponding subgraph has 4 edges. [2024-09-25 11:47:22,337 INFO L373 InvariantChecker]: Will check inductivity from ENTRY __VERIFIER_assertENTRY to ERROR_LOC __VERIFIER_assertErr1ENSURES_VIOLATIONPOST_CONDITION. Corresponding subgraph has 5 edges. [2024-09-25 11:47:22,338 INFO L373 InvariantChecker]: Will check inductivity from ENTRY __VERIFIER_assertENTRY to ERROR_LOC __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION. Corresponding subgraph has 3 edges. [2024-09-25 11:47:22,338 INFO L373 InvariantChecker]: Will check inductivity from LOOP_HEAD L46-2 to ERROR_LOC mainErr3REQUIRES_VIOLATIONPRE_CONDITION. Corresponding subgraph has 7 edges. [2024-09-25 11:47:22,338 INFO L131 InvariantChecker]: Will check 2 loop-free subgraphs from loop head to error location, 1 loop-free subgraphs from procedure entry to loop head, 3 loop-free subgraphs from loop head to loop head, 3 loop-free subgraphs from procedure entry to error location [2024-09-25 11:47:22,402 INFO L314 BlockEncoder]: Initial Icfg 4 locations, 4 edges [2024-09-25 11:47:22,403 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:22,404 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:22,404 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:22,408 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:22,410 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:22,421 INFO L101 BaseMinimizeStates]: Removed 6 edges and 2 locations by large block encoding [2024-09-25 11:47:22,422 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:22,422 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:22,422 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:22,423 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:22,425 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:22,443 INFO L520 InvariantChecker]: The annotation(s) from entry $Ultimate##0 to error location assume_abort_if_notErr0ENSURES_VIOLATIONPOST_CONDITION is inductive. [2024-09-25 11:47:22,477 INFO L314 BlockEncoder]: Initial Icfg 4 locations, 3 edges [2024-09-25 11:47:22,481 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:22,481 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:22,481 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:22,482 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:22,482 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:22,494 INFO L101 BaseMinimizeStates]: Removed 4 edges and 2 locations by large block encoding [2024-09-25 11:47:22,496 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:22,496 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:22,496 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:22,497 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:22,497 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,504 INFO L516 InvariantChecker]: unknown inductivity: todo good error message [2024-09-25 11:47:26,524 INFO L314 BlockEncoder]: Initial Icfg 7 locations, 7 edges [2024-09-25 11:47:26,524 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,524 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,524 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,524 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,524 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,563 INFO L101 BaseMinimizeStates]: Removed 12 edges and 5 locations by large block encoding [2024-09-25 11:47:26,563 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,563 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,564 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,564 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,574 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,611 INFO L314 BlockEncoder]: Initial Icfg 5 locations, 6 edges [2024-09-25 11:47:26,614 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,614 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,614 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,614 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,614 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,633 INFO L101 BaseMinimizeStates]: Removed 10 edges and 3 locations by large block encoding [2024-09-25 11:47:26,636 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,636 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,636 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,636 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,640 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,647 INFO L520 InvariantChecker]: The annotation(s) from loop head L37-3 to loop head mainErr1ASSERT_VIOLATIONWITNESS_INVARIANT is inductive. [2024-09-25 11:47:26,659 INFO L314 BlockEncoder]: Initial Icfg 9 locations, 8 edges [2024-09-25 11:47:26,661 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,661 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,662 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,662 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,662 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,673 INFO L101 BaseMinimizeStates]: Removed 14 edges and 7 locations by large block encoding [2024-09-25 11:47:26,675 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,675 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,676 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,676 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,676 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,679 INFO L520 InvariantChecker]: The annotation(s) from entry $Ultimate##0 to loop head mainErr0ASSERT_VIOLATIONWITNESS_INVARIANT is inductive. [2024-09-25 11:47:26,692 INFO L314 BlockEncoder]: Initial Icfg 5 locations, 4 edges [2024-09-25 11:47:26,693 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,693 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,694 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,694 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,694 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,703 INFO L101 BaseMinimizeStates]: Removed 6 edges and 3 locations by large block encoding [2024-09-25 11:47:26,703 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,703 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,703 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,703 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,703 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,714 INFO L520 InvariantChecker]: The annotation(s) from loop head L37-3 to loop head mainErr0ASSERT_VIOLATIONWITNESS_INVARIANT is inductive. [2024-09-25 11:47:26,725 INFO L314 BlockEncoder]: Initial Icfg 5 locations, 5 edges [2024-09-25 11:47:26,725 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,726 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,726 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,726 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,726 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,728 INFO L101 BaseMinimizeStates]: Removed 8 edges and 3 locations by large block encoding [2024-09-25 11:47:26,729 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,729 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,729 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,729 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,730 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,732 INFO L520 InvariantChecker]: The annotation(s) from entry __VERIFIER_assertENTRY to error location __VERIFIER_assertErr1ENSURES_VIOLATIONPOST_CONDITION is inductive. [2024-09-25 11:47:26,744 INFO L314 BlockEncoder]: Initial Icfg 4 locations, 3 edges [2024-09-25 11:47:26,745 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,746 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,746 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,746 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,746 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,747 INFO L101 BaseMinimizeStates]: Removed 4 edges and 2 locations by large block encoding [2024-09-25 11:47:26,749 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,749 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,749 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,749 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,750 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,752 INFO L520 InvariantChecker]: The annotation(s) from entry __VERIFIER_assertENTRY to error location __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION is inductive. [2024-09-25 11:47:26,762 INFO L314 BlockEncoder]: Initial Icfg 6 locations, 7 edges [2024-09-25 11:47:26,762 INFO L264 BlockEncoder]: Using Maximize final states [2024-09-25 11:47:26,763 INFO L271 BlockEncoder]: Using Minimize states even if more edges are added than removed.=true [2024-09-25 11:47:26,763 INFO L277 BlockEncoder]: Using Minimize states using LBE with the strategy=MULTI [2024-09-25 11:47:26,763 INFO L172 BlockEncoder]: Using Apply optimizations until nothing changes=true [2024-09-25 11:47:26,763 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,779 INFO L101 BaseMinimizeStates]: Removed 12 edges and 4 locations by large block encoding [2024-09-25 11:47:26,780 INFO L71 MaximizeFinalStates]: 0 new accepting states [2024-09-25 11:47:26,780 INFO L101 BaseMinimizeStates]: Removed 0 edges and 0 locations by large block encoding [2024-09-25 11:47:26,780 INFO L238 BlockEncoder]: Using Create parallel compositions if possible [2024-09-25 11:47:26,780 INFO L68 ParallelComposer]: Creating parallel compositions [2024-09-25 11:47:26,783 INFO L314 BlockEncoder]: Encoded RCFG 2 locations, 1 edges [2024-09-25 11:47:26,785 INFO L520 InvariantChecker]: The annotation(s) from loop head L46-2 to error location mainErr3REQUIRES_VIOLATIONPRE_CONDITION is inductive. [2024-09-25 11:47:26,793 INFO L58 RefereeStarter]: Annotation is not a valid proof of correctness. [2024-09-25 11:47:26,794 INFO L204 PluginConnector]: Invalid model from Referee for observer de.uni_freiburg.informatik.ultimate.plugins.generator.referee.RefereeObserver@774e718d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.referee CFG 25.09 11:47:26, skipping insertion in model container [2024-09-25 11:47:26,794 INFO L131 PluginConnector]: ------------------------ END Referee---------------------------- [2024-09-25 11:47:26,797 INFO L158 Benchmark]: Toolchain (without parser) took 5135.10ms. Allocated memory is still 188.7MB. Free memory was 118.2MB in the beginning and 57.1MB in the end (delta: 61.1MB). Peak memory consumption was 63.3MB. Max. memory is 16.1GB. [2024-09-25 11:47:26,797 INFO L158 Benchmark]: Witness Parser took 0.13ms. Allocated memory is still 107.0MB. Free memory is still 69.4MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-25 11:47:26,798 INFO L158 Benchmark]: CDTParser took 1.59ms. Allocated memory is still 188.7MB. Free memory is still 165.0MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-25 11:47:26,798 INFO L158 Benchmark]: CACSL2BoogieTranslator took 218.96ms. Allocated memory is still 188.7MB. Free memory was 118.0MB in the beginning and 156.3MB in the end (delta: -38.3MB). Peak memory consumption was 15.1MB. Max. memory is 16.1GB. [2024-09-25 11:47:26,798 INFO L158 Benchmark]: Boogie Preprocessor took 53.86ms. Allocated memory is still 188.7MB. Free memory was 156.3MB in the beginning and 154.3MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-09-25 11:47:26,799 INFO L158 Benchmark]: RCFGBuilder took 392.22ms. Allocated memory is still 188.7MB. Free memory was 154.3MB in the beginning and 134.7MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2024-09-25 11:47:26,800 INFO L158 Benchmark]: Referee took 4466.35ms. Allocated memory is still 188.7MB. Free memory was 134.7MB in the beginning and 57.1MB in the end (delta: 77.6MB). Peak memory consumption was 77.6MB. Max. memory is 16.1GB. [2024-09-25 11:47:26,802 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.referee: - AnnotationCheckResult: Annotation is not a valid proof of correctness. Annotation is not a valid proof of correctness. Annotation is not valid for all loop-free paths from loop head at line 41 to loop head at line 41. One counterexample starts in A=-4294967295, b=0, B=1, q=8589934592, r=4294967297 and ends in A=-4294967295, b=0, B=1, q=17179869185, r=4294967297. Insufficient resources for checking whether annotation is valid for all loop-free paths from loop head at line 41 to check that procedure precondition always holds at line 42. Annotation is valid for all loop-free paths from entry of procedure __VERIFIER_assert to check that a call to reach_error is unreachable at line 20. Annotation is valid for all loop-free paths from loop head at line 41 to check that procedure precondition always holds at line 41. Annotation is valid for all loop-free paths from entry of procedure assume_abort_if_not to exit of procedure assume_abort_if_not. Annotation is valid for all loop-free paths from loop head at line 37 to loop head at line 41. Annotation is valid for all loop-free paths from loop head at line 37 to loop head at line 37. Annotation is valid for all loop-free paths from entry of procedure __VERIFIER_assert to exit of procedure __VERIFIER_assert. Annotation is valid for all loop-free paths from entry of procedure main to loop head at line 37. * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * Witness Parser took 0.13ms. Allocated memory is still 107.0MB. Free memory is still 69.4MB. There was no memory consumed. Max. memory is 16.1GB. * CDTParser took 1.59ms. Allocated memory is still 188.7MB. Free memory is still 165.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 218.96ms. Allocated memory is still 188.7MB. Free memory was 118.0MB in the beginning and 156.3MB in the end (delta: -38.3MB). Peak memory consumption was 15.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 53.86ms. Allocated memory is still 188.7MB. Free memory was 156.3MB in the beginning and 154.3MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 392.22ms. Allocated memory is still 188.7MB. Free memory was 154.3MB in the beginning and 134.7MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Referee took 4466.35ms. Allocated memory is still 188.7MB. Free memory was 134.7MB in the beginning and 57.1MB in the end (delta: 77.6MB). Peak memory consumption was 77.6MB. Max. memory is 16.1GB. RESULT: Ultimate proved your program to be incorrect! [2024-09-25 11:47:26,856 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/referee/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE