// verifast_options{disable_overflow_check target:ILP32} extern void abort(void); //@ requires true; //@ ensures true; void reach_error() //@ requires false; //@ ensures true; {}void assume_abort_if_not(int cond) //@ requires true; //@ ensures true; { if(!cond) {abort();} } void __VERIFIER_assert(int cond) //@ requires (cond != 0); //@ ensures (cond != 0); { if (!(cond)) { ERROR: {reach_error();abort();} } return; } _Bool __VERIFIER_nondet_bool(); //@ requires true; //@ ensures true; int __VERIFIER_nondet_int(); //@ requires true; //@ ensures true; void f(int d) //@ requires true; //@ ensures true; { int x = __VERIFIER_nondet_int(), y = __VERIFIER_nondet_int(), k = __VERIFIER_nondet_int(), z = 1; L1: if (!(k <= 1073741823)) return; while (z < k) //@ invariant (0 < z); { z = 2 * z; } __VERIFIER_assert(z>=1); L2: if (!(x <= 1000000 && x >= -1000000)) return; if (!(y <= 1000000 && y >= -1000000)) return; if (!(k <= 1000000 && k >= -1000000)) return; while (x > 0 && y > 0) { bool c = __VERIFIER_nondet_bool(); if (c) { P1: x = x - d; y = __VERIFIER_nondet_bool();; z = z - 1; } else { y = y - d; } } } int main() //@ requires module(trex01_2__verifast_instrumented, true); //@ ensures junk(); { //@ open_module(); bool c = __VERIFIER_nondet_bool(); if (c) { f(1); } else { f(2); } return 0; }