// verifast_options{disable_overflow_check target:ILP32}
extern void abort(void);
//@ requires true;
//@ ensures true;


void reach_error()
//@ requires false;
//@ ensures true;
{}void assume_abort_if_not(int cond) 
//@ requires true;
//@ ensures true;
{  if(!cond) {abort();}
}
void __VERIFIER_assert(int cond) 
//@ requires (cond != 0);
//@ ensures (cond != 0);
{  if (!(cond)) {
      ERROR: {reach_error();abort();}
  }
  return;
}
int __VERIFIER_nondet_int();
//@ requires true;
//@ ensures true;
int main() 
//@ requires module(afnp2014__verifast_instrumented, true);
//@ ensures junk();
{
    //@ open_module(); 
    int x = 1;
    int y = 0;
while (y < 1000 && __VERIFIER_nondet_int())
//@ invariant (((0 <= y) && (1 <= x)) && (y <= x));
    {
        x = x + y;
        y = y + 1;
    }
    __VERIFIER_assert(x >= y);
    return 0;
}