// verifast_options{disable_overflow_check target:ILP32} extern void abort(void); //@ requires true; //@ ensures true; void reach_error() //@ requires false; //@ ensures true; {}extern unsigned __VERIFIER_nondet_uint(void); //@ requires true; //@ ensures true; void assume_abort_if_not(int cond) //@ requires true; //@ ensures (cond != 0); { if(!cond) {abort();} } void __VERIFIER_assert(int cond) //@ requires (1 <= cond); //@ ensures (1 <= cond); { if (!(cond)) { ERROR: {reach_error();} } return; } int main() //@ requires module(divbin2_valuebound1__verifast_instrumented, true); //@ ensures junk(); { //@ open_module(); unsigned A, B; unsigned q, r, b; A = __VERIFIER_nondet_uint(); assume_abort_if_not(A>=0 && A<=1); B = 1; q = 0; r = A; b = B; while (1) //@ invariant ((((((b == 1) && (A == r)) && (A <= 1)) && (q == 0)) && (B == 1)) || (((((((A == r) && (A <= 1)) && (b <= 2147483647)) && (1 <= (b / 2))) && (1 <= r)) && (q == 0)) && (B == 1))); { if (!(r >= b)) break; b = 2 * b; } while (1) //@ invariant ((((((b == 1) && (A == r)) && (q == 0)) && (B == 1)) || (((((((A == r) && (A <= 1)) && (b <= 2147483647)) && (1 <= (b / 2))) && (1 <= r)) && (q == 0)) && (B == 1))) || (((((b == 1) && (A == (r + 1))) && (A == 1)) && (B == 1)) && (q == 1))); { __VERIFIER_assert(A == q * b + r); if (!(b != B)) break; q = 2 * q; b = b / 2; if (r >= b) { q = q + 1; r = r - b; } } __VERIFIER_assert(A == q * b + r); return 0; }