// verifast_options{disable_overflow_check target:ILP32} extern void abort(void); //@ requires true; //@ ensures true; void reach_error() //@ requires false; //@ ensures true; {}void assume_abort_if_not(int cond) //@ requires true; //@ ensures true; { if(!cond) {abort();} } void __VERIFIER_assert(int cond) //@ requires (cond != 0); //@ ensures (cond != 0); { if (!(cond)) { ERROR: {reach_error();abort();} } return; } int __VERIFIER_nondet_int(); //@ requires true; //@ ensures true; int main() //@ requires module(hhk2008__verifast_instrumented, true); //@ ensures junk(); { //@ open_module(); int a = __VERIFIER_nondet_int(); int b = __VERIFIER_nondet_int(); int res, cnt; if (!(a <= 1000000)) return 0; if (!(0 <= b && b <= 1000000)) return 0; res = a; cnt = b; while (cnt > 0) //@ invariant ((res <= (b + a)) && ((cnt + res) == (b + a))); { cnt = cnt - 1; res = res + 1; } __VERIFIER_assert(res == a + b); return 0; }