void abort() { };
                                                                                                                                                          
                                                                            

/*@ 
    requires (((0 <= cond) && (cond <= 1))) && (cond != 0);
    ensures (((0 <= cond) && (cond <= 1))) && (1);
@*/
void __VERIFIER_assert(int cond) {
  if (!(cond)) {
    ERROR: {/*@ assert(0); */;abort();}
  }
  return;
}

int main() {
  unsigned int x = 0;
  unsigned int y = 0;

/*@
loop invariant (((x == 0) || (((x + 4294967295) % 4294967296) < 268435455)));
@*/
  while (x < 0x0fffffff) {
    y = 0;

/*@
loop invariant (((x == 0) || ((x <= 268435454) && (((x + 4294967295) % 4294967296) <= 268435454))));
@*/
    while (y < 10) {
      y++;
    }

    x++;
  }

  __VERIFIER_assert(x % 2);
}