java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector-Const.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-370d6ab [2018-11-14 18:07:43,387 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-14 18:07:43,389 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-14 18:07:43,401 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-14 18:07:43,402 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-14 18:07:43,403 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-14 18:07:43,404 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-14 18:07:43,406 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-14 18:07:43,408 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-14 18:07:43,409 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-14 18:07:43,410 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-14 18:07:43,410 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-14 18:07:43,411 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-14 18:07:43,412 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-14 18:07:43,413 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-14 18:07:43,414 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-14 18:07:43,415 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-14 18:07:43,417 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-14 18:07:43,419 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-14 18:07:43,420 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-14 18:07:43,422 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-14 18:07:43,424 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-14 18:07:43,428 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-14 18:07:43,428 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-14 18:07:43,428 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-14 18:07:43,430 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-14 18:07:43,431 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-14 18:07:43,432 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-14 18:07:43,433 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-14 18:07:43,434 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-14 18:07:43,434 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-14 18:07:43,435 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-14 18:07:43,435 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-14 18:07:43,435 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-14 18:07:43,436 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-14 18:07:43,437 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-14 18:07:43,437 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector-Const.epf [2018-11-14 18:07:43,457 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-14 18:07:43,458 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-14 18:07:43,458 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-14 18:07:43,459 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-14 18:07:43,460 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-14 18:07:43,460 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-14 18:07:43,460 INFO L133 SettingsManager]: * Use SBE=true [2018-11-14 18:07:43,461 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-14 18:07:43,461 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-14 18:07:43,461 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-14 18:07:43,461 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-14 18:07:43,461 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-14 18:07:43,462 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-14 18:07:43,463 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-14 18:07:43,463 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-14 18:07:43,463 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-14 18:07:43,463 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-14 18:07:43,463 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-14 18:07:43,464 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-14 18:07:43,464 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-14 18:07:43,464 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-14 18:07:43,464 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-14 18:07:43,464 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-14 18:07:43,465 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-14 18:07:43,466 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 18:07:43,466 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-14 18:07:43,466 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-14 18:07:43,467 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-14 18:07:43,467 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-14 18:07:43,467 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-14 18:07:43,467 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-14 18:07:43,467 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-14 18:07:43,467 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-14 18:07:43,528 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-14 18:07:43,545 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-14 18:07:43,550 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-14 18:07:43,552 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-14 18:07:43,552 INFO L276 PluginConnector]: CDTParser initialized [2018-11-14 18:07:43,553 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-14 18:07:43,609 INFO L218 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/14028e708/a839dc35e2cf496f9b9a62fc69dbaf15/FLAGe6f00cc17 [2018-11-14 18:07:44,198 INFO L298 CDTParser]: Found 1 translation units. [2018-11-14 18:07:44,201 INFO L158 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-14 18:07:44,229 INFO L346 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/14028e708/a839dc35e2cf496f9b9a62fc69dbaf15/FLAGe6f00cc17 [2018-11-14 18:07:44,248 INFO L354 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/14028e708/a839dc35e2cf496f9b9a62fc69dbaf15 [2018-11-14 18:07:44,260 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-14 18:07:44,261 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-14 18:07:44,262 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-14 18:07:44,262 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-14 18:07:44,266 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-14 18:07:44,268 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 06:07:44" (1/1) ... [2018-11-14 18:07:44,271 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@22f5bc89 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:44, skipping insertion in model container [2018-11-14 18:07:44,271 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 06:07:44" (1/1) ... [2018-11-14 18:07:44,280 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-14 18:07:44,346 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-14 18:07:45,331 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 18:07:45,448 INFO L191 MainTranslator]: Completed pre-run [2018-11-14 18:07:45,809 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 18:07:45,837 INFO L195 MainTranslator]: Completed translation [2018-11-14 18:07:45,837 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45 WrapperNode [2018-11-14 18:07:45,837 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-14 18:07:45,838 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-14 18:07:45,838 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-14 18:07:45,838 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-14 18:07:45,855 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:45,855 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:45,906 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:45,907 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:46,029 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:46,049 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:46,061 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... [2018-11-14 18:07:46,079 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-14 18:07:46,079 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-14 18:07:46,080 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-14 18:07:46,080 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-14 18:07:46,081 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 18:07:46,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-14 18:07:46,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-14 18:07:46,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_get_server_method [2018-11-14 18:07:46,163 INFO L138 BoogieDeclarations]: Found implementation of procedure SSLv3_server_method [2018-11-14 18:07:46,163 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-14 18:07:46,163 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-14 18:07:46,163 INFO L138 BoogieDeclarations]: Found implementation of procedure sslv3_base_method [2018-11-14 18:07:46,163 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-14 18:07:46,164 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-14 18:07:46,164 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-14 18:07:46,164 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-14 18:07:46,164 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2018-11-14 18:07:46,164 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-14 18:07:46,167 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2018-11-14 18:07:46,167 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-14 18:07:46,167 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-14 18:07:46,167 INFO L130 BoogieDeclarations]: Found specification of procedure SSLv3_server_method [2018-11-14 18:07:46,168 INFO L130 BoogieDeclarations]: Found specification of procedure sslv3_base_method [2018-11-14 18:07:46,168 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-14 18:07:46,168 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_get_server_method [2018-11-14 18:07:46,169 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-14 18:07:46,169 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-14 18:07:46,169 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-14 18:07:46,169 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2018-11-14 18:07:46,170 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-14 18:07:46,171 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-14 18:07:46,860 WARN L684 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-14 18:07:46,861 WARN L649 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-14 18:07:51,433 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-14 18:07:51,434 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 06:07:51 BoogieIcfgContainer [2018-11-14 18:07:51,434 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-14 18:07:51,435 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-14 18:07:51,435 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-14 18:07:51,439 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-14 18:07:51,439 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 06:07:44" (1/3) ... [2018-11-14 18:07:51,440 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@77184bfe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 06:07:51, skipping insertion in model container [2018-11-14 18:07:51,440 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 06:07:45" (2/3) ... [2018-11-14 18:07:51,441 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@77184bfe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 06:07:51, skipping insertion in model container [2018-11-14 18:07:51,441 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 06:07:51" (3/3) ... [2018-11-14 18:07:51,442 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-14 18:07:51,453 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-14 18:07:51,461 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-14 18:07:51,480 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-14 18:07:51,515 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-14 18:07:51,516 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-14 18:07:51,516 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-14 18:07:51,516 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-14 18:07:51,517 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-14 18:07:51,517 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-14 18:07:51,517 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-14 18:07:51,517 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-14 18:07:51,517 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-14 18:07:51,541 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states. [2018-11-14 18:07:51,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2018-11-14 18:07:51,552 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:07:51,553 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:07:51,555 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:07:51,561 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:07:51,562 INFO L82 PathProgramCache]: Analyzing trace with hash -155944522, now seen corresponding path program 1 times [2018-11-14 18:07:51,569 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:07:51,569 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:07:51,587 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:07:51,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:07:51,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:07:51,756 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:07:52,016 INFO L256 TraceCheckUtils]: 0: Hoare triple {161#true} call ULTIMATE.init(); {161#true} is VALID [2018-11-14 18:07:52,020 INFO L273 TraceCheckUtils]: 1: Hoare triple {161#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {161#true} is VALID [2018-11-14 18:07:52,021 INFO L273 TraceCheckUtils]: 2: Hoare triple {161#true} assume true; {161#true} is VALID [2018-11-14 18:07:52,021 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {161#true} {161#true} #683#return; {161#true} is VALID [2018-11-14 18:07:52,022 INFO L256 TraceCheckUtils]: 4: Hoare triple {161#true} call #t~ret138 := main(); {161#true} is VALID [2018-11-14 18:07:52,022 INFO L273 TraceCheckUtils]: 5: Hoare triple {161#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {161#true} is VALID [2018-11-14 18:07:52,023 INFO L256 TraceCheckUtils]: 6: Hoare triple {161#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {161#true} is VALID [2018-11-14 18:07:52,043 INFO L273 TraceCheckUtils]: 7: Hoare triple {161#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,059 INFO L273 TraceCheckUtils]: 8: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume ~bvadd32(#t~mem19.base, #t~mem19.offset) != 0bv32;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,062 INFO L273 TraceCheckUtils]: 9: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,064 INFO L273 TraceCheckUtils]: 10: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(~bvand32(12288bv32, ~tmp___1~0) != 0bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,073 INFO L273 TraceCheckUtils]: 11: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,082 INFO L273 TraceCheckUtils]: 12: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(~bvadd32(#t~mem22.base, #t~mem22.offset) == 0bv32);havoc #t~mem22.base, #t~mem22.offset; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,091 INFO L273 TraceCheckUtils]: 13: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume true; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,104 INFO L273 TraceCheckUtils]: 14: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !false; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,116 INFO L273 TraceCheckUtils]: 15: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,118 INFO L273 TraceCheckUtils]: 16: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,118 INFO L273 TraceCheckUtils]: 17: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,123 INFO L273 TraceCheckUtils]: 18: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,125 INFO L273 TraceCheckUtils]: 19: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,125 INFO L273 TraceCheckUtils]: 20: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,127 INFO L273 TraceCheckUtils]: 21: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,127 INFO L273 TraceCheckUtils]: 22: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,129 INFO L273 TraceCheckUtils]: 23: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,130 INFO L273 TraceCheckUtils]: 24: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,130 INFO L273 TraceCheckUtils]: 25: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,147 INFO L273 TraceCheckUtils]: 26: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,161 INFO L273 TraceCheckUtils]: 27: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,177 INFO L273 TraceCheckUtils]: 28: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,186 INFO L273 TraceCheckUtils]: 29: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,186 INFO L273 TraceCheckUtils]: 30: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,187 INFO L273 TraceCheckUtils]: 31: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,190 INFO L273 TraceCheckUtils]: 32: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,190 INFO L273 TraceCheckUtils]: 33: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume #t~mem41 == 8544bv32;havoc #t~mem41; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,192 INFO L273 TraceCheckUtils]: 34: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,192 INFO L273 TraceCheckUtils]: 35: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume ~bvand32(1bv32, #t~mem93) != 0bv32;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,193 INFO L273 TraceCheckUtils]: 36: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(~bvadd32(#t~mem95.base, #t~mem95.offset) != 0bv32);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,193 INFO L273 TraceCheckUtils]: 37: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,194 INFO L273 TraceCheckUtils]: 38: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(~bvand32(256bv32, #t~mem100) != 0bv32);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,195 INFO L273 TraceCheckUtils]: 39: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:07:52,197 INFO L273 TraceCheckUtils]: 40: Hoare triple {187#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume ~blastFlag~0 == 7bv32; {162#false} is VALID [2018-11-14 18:07:52,197 INFO L273 TraceCheckUtils]: 41: Hoare triple {162#false} assume !false; {162#false} is VALID [2018-11-14 18:07:52,208 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:07:52,208 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:07:52,217 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:07:52,217 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:07:52,223 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 42 [2018-11-14 18:07:52,227 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:07:52,230 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:07:52,398 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:07:52,398 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:07:52,406 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:07:52,407 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:07:52,409 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 3 states. [2018-11-14 18:07:58,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:07:58,140 INFO L93 Difference]: Finished difference Result 438 states and 739 transitions. [2018-11-14 18:07:58,140 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:07:58,140 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 42 [2018-11-14 18:07:58,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:07:58,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:07:58,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 739 transitions. [2018-11-14 18:07:58,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:07:58,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 739 transitions. [2018-11-14 18:07:58,185 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 739 transitions. [2018-11-14 18:07:59,612 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 739 edges. 739 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:07:59,643 INFO L225 Difference]: With dead ends: 438 [2018-11-14 18:07:59,644 INFO L226 Difference]: Without dead ends: 267 [2018-11-14 18:07:59,649 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:07:59,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2018-11-14 18:07:59,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 267. [2018-11-14 18:07:59,878 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:07:59,879 INFO L82 GeneralOperation]: Start isEquivalent. First operand 267 states. Second operand 267 states. [2018-11-14 18:07:59,879 INFO L74 IsIncluded]: Start isIncluded. First operand 267 states. Second operand 267 states. [2018-11-14 18:07:59,879 INFO L87 Difference]: Start difference. First operand 267 states. Second operand 267 states. [2018-11-14 18:07:59,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:07:59,894 INFO L93 Difference]: Finished difference Result 267 states and 399 transitions. [2018-11-14 18:07:59,894 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 399 transitions. [2018-11-14 18:07:59,897 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:07:59,898 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:07:59,898 INFO L74 IsIncluded]: Start isIncluded. First operand 267 states. Second operand 267 states. [2018-11-14 18:07:59,898 INFO L87 Difference]: Start difference. First operand 267 states. Second operand 267 states. [2018-11-14 18:07:59,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:07:59,913 INFO L93 Difference]: Finished difference Result 267 states and 399 transitions. [2018-11-14 18:07:59,913 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 399 transitions. [2018-11-14 18:07:59,915 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:07:59,916 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:07:59,916 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:07:59,916 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:07:59,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 267 states. [2018-11-14 18:07:59,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 399 transitions. [2018-11-14 18:07:59,931 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 399 transitions. Word has length 42 [2018-11-14 18:07:59,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:07:59,932 INFO L480 AbstractCegarLoop]: Abstraction has 267 states and 399 transitions. [2018-11-14 18:07:59,932 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:07:59,932 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 399 transitions. [2018-11-14 18:07:59,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-14 18:07:59,935 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:07:59,935 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:07:59,936 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:07:59,936 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:07:59,936 INFO L82 PathProgramCache]: Analyzing trace with hash -539835152, now seen corresponding path program 1 times [2018-11-14 18:07:59,937 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:07:59,937 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:07:59,964 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:08:00,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:00,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:00,109 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:08:00,211 INFO L256 TraceCheckUtils]: 0: Hoare triple {1662#true} call ULTIMATE.init(); {1662#true} is VALID [2018-11-14 18:08:00,211 INFO L273 TraceCheckUtils]: 1: Hoare triple {1662#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,212 INFO L273 TraceCheckUtils]: 2: Hoare triple {1662#true} assume true; {1662#true} is VALID [2018-11-14 18:08:00,212 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1662#true} {1662#true} #683#return; {1662#true} is VALID [2018-11-14 18:08:00,212 INFO L256 TraceCheckUtils]: 4: Hoare triple {1662#true} call #t~ret138 := main(); {1662#true} is VALID [2018-11-14 18:08:00,213 INFO L273 TraceCheckUtils]: 5: Hoare triple {1662#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,213 INFO L256 TraceCheckUtils]: 6: Hoare triple {1662#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1662#true} is VALID [2018-11-14 18:08:00,213 INFO L273 TraceCheckUtils]: 7: Hoare triple {1662#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,214 INFO L273 TraceCheckUtils]: 8: Hoare triple {1662#true} assume ~bvadd32(#t~mem19.base, #t~mem19.offset) != 0bv32;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1662#true} is VALID [2018-11-14 18:08:00,214 INFO L273 TraceCheckUtils]: 9: Hoare triple {1662#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {1662#true} is VALID [2018-11-14 18:08:00,214 INFO L273 TraceCheckUtils]: 10: Hoare triple {1662#true} assume !(~bvand32(12288bv32, ~tmp___1~0) != 0bv32); {1662#true} is VALID [2018-11-14 18:08:00,215 INFO L273 TraceCheckUtils]: 11: Hoare triple {1662#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,215 INFO L273 TraceCheckUtils]: 12: Hoare triple {1662#true} assume !(~bvadd32(#t~mem22.base, #t~mem22.offset) == 0bv32);havoc #t~mem22.base, #t~mem22.offset; {1662#true} is VALID [2018-11-14 18:08:00,215 INFO L273 TraceCheckUtils]: 13: Hoare triple {1662#true} assume true; {1662#true} is VALID [2018-11-14 18:08:00,216 INFO L273 TraceCheckUtils]: 14: Hoare triple {1662#true} assume !false; {1662#true} is VALID [2018-11-14 18:08:00,216 INFO L273 TraceCheckUtils]: 15: Hoare triple {1662#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,216 INFO L273 TraceCheckUtils]: 16: Hoare triple {1662#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,217 INFO L273 TraceCheckUtils]: 17: Hoare triple {1662#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,217 INFO L273 TraceCheckUtils]: 18: Hoare triple {1662#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,217 INFO L273 TraceCheckUtils]: 19: Hoare triple {1662#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,218 INFO L273 TraceCheckUtils]: 20: Hoare triple {1662#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,218 INFO L273 TraceCheckUtils]: 21: Hoare triple {1662#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,218 INFO L273 TraceCheckUtils]: 22: Hoare triple {1662#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,218 INFO L273 TraceCheckUtils]: 23: Hoare triple {1662#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1662#true} is VALID [2018-11-14 18:08:00,219 INFO L273 TraceCheckUtils]: 24: Hoare triple {1662#true} assume #t~mem32 == 8464bv32;havoc #t~mem32; {1662#true} is VALID [2018-11-14 18:08:00,219 INFO L273 TraceCheckUtils]: 25: Hoare triple {1662#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {1662#true} is VALID [2018-11-14 18:08:00,226 INFO L273 TraceCheckUtils]: 26: Hoare triple {1662#true} assume ~blastFlag~0 == 0bv32;~blastFlag~0 := 1bv32; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,226 INFO L273 TraceCheckUtils]: 27: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,227 INFO L273 TraceCheckUtils]: 28: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,227 INFO L273 TraceCheckUtils]: 29: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,230 INFO L273 TraceCheckUtils]: 30: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,231 INFO L273 TraceCheckUtils]: 31: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume true; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,231 INFO L273 TraceCheckUtils]: 32: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !false; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,233 INFO L273 TraceCheckUtils]: 33: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,233 INFO L273 TraceCheckUtils]: 34: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,235 INFO L273 TraceCheckUtils]: 35: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,235 INFO L273 TraceCheckUtils]: 36: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,238 INFO L273 TraceCheckUtils]: 37: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,238 INFO L273 TraceCheckUtils]: 38: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,240 INFO L273 TraceCheckUtils]: 39: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,240 INFO L273 TraceCheckUtils]: 40: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,243 INFO L273 TraceCheckUtils]: 41: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,243 INFO L273 TraceCheckUtils]: 42: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,245 INFO L273 TraceCheckUtils]: 43: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,245 INFO L273 TraceCheckUtils]: 44: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,248 INFO L273 TraceCheckUtils]: 45: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,248 INFO L273 TraceCheckUtils]: 46: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,249 INFO L273 TraceCheckUtils]: 47: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,250 INFO L273 TraceCheckUtils]: 48: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,250 INFO L273 TraceCheckUtils]: 49: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,252 INFO L273 TraceCheckUtils]: 50: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,253 INFO L273 TraceCheckUtils]: 51: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume #t~mem41 == 8544bv32;havoc #t~mem41; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,254 INFO L273 TraceCheckUtils]: 52: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,254 INFO L273 TraceCheckUtils]: 53: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume ~bvand32(1bv32, #t~mem93) != 0bv32;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,256 INFO L273 TraceCheckUtils]: 54: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(~bvadd32(#t~mem95.base, #t~mem95.offset) != 0bv32);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,256 INFO L273 TraceCheckUtils]: 55: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,258 INFO L273 TraceCheckUtils]: 56: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(~bvand32(256bv32, #t~mem100) != 0bv32);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,258 INFO L273 TraceCheckUtils]: 57: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:00,259 INFO L273 TraceCheckUtils]: 58: Hoare triple {1745#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume ~blastFlag~0 == 7bv32; {1663#false} is VALID [2018-11-14 18:08:00,259 INFO L273 TraceCheckUtils]: 59: Hoare triple {1663#false} assume !false; {1663#false} is VALID [2018-11-14 18:08:00,268 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 18:08:00,269 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:08:00,273 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:08:00,273 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:08:00,275 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 60 [2018-11-14 18:08:00,276 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:08:00,278 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:08:00,407 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:00,407 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:08:00,408 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:08:00,408 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:00,408 INFO L87 Difference]: Start difference. First operand 267 states and 399 transitions. Second operand 3 states. [2018-11-14 18:08:06,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:06,173 INFO L93 Difference]: Finished difference Result 518 states and 788 transitions. [2018-11-14 18:08:06,174 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:08:06,174 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 60 [2018-11-14 18:08:06,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:08:06,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:06,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-14 18:08:06,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:06,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-14 18:08:06,189 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 603 transitions. [2018-11-14 18:08:07,381 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:07,405 INFO L225 Difference]: With dead ends: 518 [2018-11-14 18:08:07,406 INFO L226 Difference]: Without dead ends: 390 [2018-11-14 18:08:07,408 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:07,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 390 states. [2018-11-14 18:08:07,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 390 to 390. [2018-11-14 18:08:07,533 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:08:07,533 INFO L82 GeneralOperation]: Start isEquivalent. First operand 390 states. Second operand 390 states. [2018-11-14 18:08:07,533 INFO L74 IsIncluded]: Start isIncluded. First operand 390 states. Second operand 390 states. [2018-11-14 18:08:07,533 INFO L87 Difference]: Start difference. First operand 390 states. Second operand 390 states. [2018-11-14 18:08:07,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:07,560 INFO L93 Difference]: Finished difference Result 390 states and 581 transitions. [2018-11-14 18:08:07,560 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 581 transitions. [2018-11-14 18:08:07,561 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:07,561 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:07,562 INFO L74 IsIncluded]: Start isIncluded. First operand 390 states. Second operand 390 states. [2018-11-14 18:08:07,562 INFO L87 Difference]: Start difference. First operand 390 states. Second operand 390 states. [2018-11-14 18:08:07,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:07,588 INFO L93 Difference]: Finished difference Result 390 states and 581 transitions. [2018-11-14 18:08:07,589 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 581 transitions. [2018-11-14 18:08:07,590 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:07,590 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:07,590 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:08:07,590 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:08:07,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 390 states. [2018-11-14 18:08:07,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 581 transitions. [2018-11-14 18:08:07,617 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 581 transitions. Word has length 60 [2018-11-14 18:08:07,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:08:07,618 INFO L480 AbstractCegarLoop]: Abstraction has 390 states and 581 transitions. [2018-11-14 18:08:07,618 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:08:07,618 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 581 transitions. [2018-11-14 18:08:07,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 18:08:07,621 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:08:07,621 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:08:07,621 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:08:07,622 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:08:07,622 INFO L82 PathProgramCache]: Analyzing trace with hash 1293977608, now seen corresponding path program 1 times [2018-11-14 18:08:07,623 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:08:07,623 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:08:07,654 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:08:07,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:07,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:07,793 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:08:08,203 INFO L256 TraceCheckUtils]: 0: Hoare triple {3701#true} call ULTIMATE.init(); {3701#true} is VALID [2018-11-14 18:08:08,204 INFO L273 TraceCheckUtils]: 1: Hoare triple {3701#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,204 INFO L273 TraceCheckUtils]: 2: Hoare triple {3701#true} assume true; {3701#true} is VALID [2018-11-14 18:08:08,205 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3701#true} {3701#true} #683#return; {3701#true} is VALID [2018-11-14 18:08:08,205 INFO L256 TraceCheckUtils]: 4: Hoare triple {3701#true} call #t~ret138 := main(); {3701#true} is VALID [2018-11-14 18:08:08,206 INFO L273 TraceCheckUtils]: 5: Hoare triple {3701#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,206 INFO L256 TraceCheckUtils]: 6: Hoare triple {3701#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3701#true} is VALID [2018-11-14 18:08:08,206 INFO L273 TraceCheckUtils]: 7: Hoare triple {3701#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,206 INFO L273 TraceCheckUtils]: 8: Hoare triple {3701#true} assume ~bvadd32(#t~mem19.base, #t~mem19.offset) != 0bv32;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3701#true} is VALID [2018-11-14 18:08:08,207 INFO L273 TraceCheckUtils]: 9: Hoare triple {3701#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {3701#true} is VALID [2018-11-14 18:08:08,207 INFO L273 TraceCheckUtils]: 10: Hoare triple {3701#true} assume !(~bvand32(12288bv32, ~tmp___1~0) != 0bv32); {3701#true} is VALID [2018-11-14 18:08:08,207 INFO L273 TraceCheckUtils]: 11: Hoare triple {3701#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,207 INFO L273 TraceCheckUtils]: 12: Hoare triple {3701#true} assume !(~bvadd32(#t~mem22.base, #t~mem22.offset) == 0bv32);havoc #t~mem22.base, #t~mem22.offset; {3701#true} is VALID [2018-11-14 18:08:08,208 INFO L273 TraceCheckUtils]: 13: Hoare triple {3701#true} assume true; {3701#true} is VALID [2018-11-14 18:08:08,208 INFO L273 TraceCheckUtils]: 14: Hoare triple {3701#true} assume !false; {3701#true} is VALID [2018-11-14 18:08:08,208 INFO L273 TraceCheckUtils]: 15: Hoare triple {3701#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,208 INFO L273 TraceCheckUtils]: 16: Hoare triple {3701#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,209 INFO L273 TraceCheckUtils]: 17: Hoare triple {3701#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,209 INFO L273 TraceCheckUtils]: 18: Hoare triple {3701#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,209 INFO L273 TraceCheckUtils]: 19: Hoare triple {3701#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,209 INFO L273 TraceCheckUtils]: 20: Hoare triple {3701#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,210 INFO L273 TraceCheckUtils]: 21: Hoare triple {3701#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,210 INFO L273 TraceCheckUtils]: 22: Hoare triple {3701#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,210 INFO L273 TraceCheckUtils]: 23: Hoare triple {3701#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,210 INFO L273 TraceCheckUtils]: 24: Hoare triple {3701#true} assume #t~mem32 == 8464bv32;havoc #t~mem32; {3701#true} is VALID [2018-11-14 18:08:08,211 INFO L273 TraceCheckUtils]: 25: Hoare triple {3701#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {3701#true} is VALID [2018-11-14 18:08:08,211 INFO L273 TraceCheckUtils]: 26: Hoare triple {3701#true} assume ~blastFlag~0 == 0bv32;~blastFlag~0 := 1bv32; {3701#true} is VALID [2018-11-14 18:08:08,211 INFO L273 TraceCheckUtils]: 27: Hoare triple {3701#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,212 INFO L273 TraceCheckUtils]: 28: Hoare triple {3701#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,212 INFO L273 TraceCheckUtils]: 29: Hoare triple {3701#true} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {3701#true} is VALID [2018-11-14 18:08:08,212 INFO L273 TraceCheckUtils]: 30: Hoare triple {3701#true} ~skip~0 := 0bv32; {3701#true} is VALID [2018-11-14 18:08:08,212 INFO L273 TraceCheckUtils]: 31: Hoare triple {3701#true} assume true; {3701#true} is VALID [2018-11-14 18:08:08,212 INFO L273 TraceCheckUtils]: 32: Hoare triple {3701#true} assume !false; {3701#true} is VALID [2018-11-14 18:08:08,213 INFO L273 TraceCheckUtils]: 33: Hoare triple {3701#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,213 INFO L273 TraceCheckUtils]: 34: Hoare triple {3701#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,213 INFO L273 TraceCheckUtils]: 35: Hoare triple {3701#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,213 INFO L273 TraceCheckUtils]: 36: Hoare triple {3701#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,213 INFO L273 TraceCheckUtils]: 37: Hoare triple {3701#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,213 INFO L273 TraceCheckUtils]: 38: Hoare triple {3701#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,214 INFO L273 TraceCheckUtils]: 39: Hoare triple {3701#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,214 INFO L273 TraceCheckUtils]: 40: Hoare triple {3701#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,214 INFO L273 TraceCheckUtils]: 41: Hoare triple {3701#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,214 INFO L273 TraceCheckUtils]: 42: Hoare triple {3701#true} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,214 INFO L273 TraceCheckUtils]: 43: Hoare triple {3701#true} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,215 INFO L273 TraceCheckUtils]: 44: Hoare triple {3701#true} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3701#true} is VALID [2018-11-14 18:08:08,215 INFO L273 TraceCheckUtils]: 45: Hoare triple {3701#true} assume #t~mem35 == 8496bv32;havoc #t~mem35; {3701#true} is VALID [2018-11-14 18:08:08,215 INFO L273 TraceCheckUtils]: 46: Hoare triple {3701#true} ~ret~0 := #t~nondet70;havoc #t~nondet70; {3701#true} is VALID [2018-11-14 18:08:08,216 INFO L273 TraceCheckUtils]: 47: Hoare triple {3701#true} assume ~blastFlag~0 == 1bv32;~blastFlag~0 := 2bv32; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,220 INFO L273 TraceCheckUtils]: 48: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,220 INFO L273 TraceCheckUtils]: 49: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume #t~mem71 != 0bv32;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,221 INFO L273 TraceCheckUtils]: 50: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,221 INFO L273 TraceCheckUtils]: 51: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,221 INFO L273 TraceCheckUtils]: 52: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,222 INFO L273 TraceCheckUtils]: 53: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,222 INFO L273 TraceCheckUtils]: 54: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume true; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,223 INFO L273 TraceCheckUtils]: 55: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !false; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,223 INFO L273 TraceCheckUtils]: 56: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,223 INFO L273 TraceCheckUtils]: 57: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,228 INFO L273 TraceCheckUtils]: 58: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,229 INFO L273 TraceCheckUtils]: 59: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,243 INFO L273 TraceCheckUtils]: 60: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,245 INFO L273 TraceCheckUtils]: 61: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,246 INFO L273 TraceCheckUtils]: 62: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,246 INFO L273 TraceCheckUtils]: 63: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,246 INFO L273 TraceCheckUtils]: 64: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,247 INFO L273 TraceCheckUtils]: 65: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,247 INFO L273 TraceCheckUtils]: 66: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,247 INFO L273 TraceCheckUtils]: 67: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,248 INFO L273 TraceCheckUtils]: 68: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,249 INFO L273 TraceCheckUtils]: 69: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,249 INFO L273 TraceCheckUtils]: 70: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,250 INFO L273 TraceCheckUtils]: 71: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,251 INFO L273 TraceCheckUtils]: 72: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,251 INFO L273 TraceCheckUtils]: 73: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,252 INFO L273 TraceCheckUtils]: 74: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume #t~mem41 == 8544bv32;havoc #t~mem41; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,254 INFO L273 TraceCheckUtils]: 75: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,254 INFO L273 TraceCheckUtils]: 76: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume ~bvand32(1bv32, #t~mem93) != 0bv32;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,256 INFO L273 TraceCheckUtils]: 77: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(~bvadd32(#t~mem95.base, #t~mem95.offset) != 0bv32);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,258 INFO L273 TraceCheckUtils]: 78: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,258 INFO L273 TraceCheckUtils]: 79: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(~bvand32(256bv32, #t~mem100) != 0bv32);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,260 INFO L273 TraceCheckUtils]: 80: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:08,260 INFO L273 TraceCheckUtils]: 81: Hoare triple {3847#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume ~blastFlag~0 == 7bv32; {3702#false} is VALID [2018-11-14 18:08:08,260 INFO L273 TraceCheckUtils]: 82: Hoare triple {3702#false} assume !false; {3702#false} is VALID [2018-11-14 18:08:08,267 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-14 18:08:08,267 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:08:08,272 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:08:08,272 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:08:08,272 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-14 18:08:08,274 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:08:08,274 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:08:08,425 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:08,425 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:08:08,426 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:08:08,426 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:08,426 INFO L87 Difference]: Start difference. First operand 390 states and 581 transitions. Second operand 3 states. [2018-11-14 18:08:14,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:14,012 INFO L93 Difference]: Finished difference Result 764 states and 1153 transitions. [2018-11-14 18:08:14,013 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:08:14,013 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-14 18:08:14,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:08:14,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:14,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 604 transitions. [2018-11-14 18:08:14,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:14,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 604 transitions. [2018-11-14 18:08:14,026 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 604 transitions. [2018-11-14 18:08:15,537 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 604 edges. 604 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:15,556 INFO L225 Difference]: With dead ends: 764 [2018-11-14 18:08:15,556 INFO L226 Difference]: Without dead ends: 513 [2018-11-14 18:08:15,558 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:15,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2018-11-14 18:08:15,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 513. [2018-11-14 18:08:15,686 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:08:15,686 INFO L82 GeneralOperation]: Start isEquivalent. First operand 513 states. Second operand 513 states. [2018-11-14 18:08:15,686 INFO L74 IsIncluded]: Start isIncluded. First operand 513 states. Second operand 513 states. [2018-11-14 18:08:15,686 INFO L87 Difference]: Start difference. First operand 513 states. Second operand 513 states. [2018-11-14 18:08:15,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:15,707 INFO L93 Difference]: Finished difference Result 513 states and 764 transitions. [2018-11-14 18:08:15,707 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 764 transitions. [2018-11-14 18:08:15,708 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:15,708 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:15,709 INFO L74 IsIncluded]: Start isIncluded. First operand 513 states. Second operand 513 states. [2018-11-14 18:08:15,709 INFO L87 Difference]: Start difference. First operand 513 states. Second operand 513 states. [2018-11-14 18:08:15,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:15,728 INFO L93 Difference]: Finished difference Result 513 states and 764 transitions. [2018-11-14 18:08:15,728 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 764 transitions. [2018-11-14 18:08:15,730 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:15,730 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:15,730 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:08:15,730 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:08:15,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 513 states. [2018-11-14 18:08:15,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 513 states to 513 states and 764 transitions. [2018-11-14 18:08:15,751 INFO L78 Accepts]: Start accepts. Automaton has 513 states and 764 transitions. Word has length 83 [2018-11-14 18:08:15,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:08:15,751 INFO L480 AbstractCegarLoop]: Abstraction has 513 states and 764 transitions. [2018-11-14 18:08:15,751 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:08:15,752 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 764 transitions. [2018-11-14 18:08:15,756 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-14 18:08:15,756 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:08:15,756 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:08:15,757 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:08:15,757 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:08:15,757 INFO L82 PathProgramCache]: Analyzing trace with hash -1222010632, now seen corresponding path program 1 times [2018-11-14 18:08:15,758 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:08:15,758 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:08:15,790 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:08:15,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:15,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:15,981 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:08:16,961 INFO L256 TraceCheckUtils]: 0: Hoare triple {6490#true} call ULTIMATE.init(); {6490#true} is VALID [2018-11-14 18:08:16,961 INFO L273 TraceCheckUtils]: 1: Hoare triple {6490#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,961 INFO L273 TraceCheckUtils]: 2: Hoare triple {6490#true} assume true; {6490#true} is VALID [2018-11-14 18:08:16,962 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6490#true} {6490#true} #683#return; {6490#true} is VALID [2018-11-14 18:08:16,962 INFO L256 TraceCheckUtils]: 4: Hoare triple {6490#true} call #t~ret138 := main(); {6490#true} is VALID [2018-11-14 18:08:16,963 INFO L273 TraceCheckUtils]: 5: Hoare triple {6490#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,963 INFO L256 TraceCheckUtils]: 6: Hoare triple {6490#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6490#true} is VALID [2018-11-14 18:08:16,963 INFO L273 TraceCheckUtils]: 7: Hoare triple {6490#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,963 INFO L273 TraceCheckUtils]: 8: Hoare triple {6490#true} assume ~bvadd32(#t~mem19.base, #t~mem19.offset) != 0bv32;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6490#true} is VALID [2018-11-14 18:08:16,964 INFO L273 TraceCheckUtils]: 9: Hoare triple {6490#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {6490#true} is VALID [2018-11-14 18:08:16,964 INFO L273 TraceCheckUtils]: 10: Hoare triple {6490#true} assume !(~bvand32(12288bv32, ~tmp___1~0) != 0bv32); {6490#true} is VALID [2018-11-14 18:08:16,964 INFO L273 TraceCheckUtils]: 11: Hoare triple {6490#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,965 INFO L273 TraceCheckUtils]: 12: Hoare triple {6490#true} assume !(~bvadd32(#t~mem22.base, #t~mem22.offset) == 0bv32);havoc #t~mem22.base, #t~mem22.offset; {6490#true} is VALID [2018-11-14 18:08:16,965 INFO L273 TraceCheckUtils]: 13: Hoare triple {6490#true} assume true; {6490#true} is VALID [2018-11-14 18:08:16,965 INFO L273 TraceCheckUtils]: 14: Hoare triple {6490#true} assume !false; {6490#true} is VALID [2018-11-14 18:08:16,965 INFO L273 TraceCheckUtils]: 15: Hoare triple {6490#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,965 INFO L273 TraceCheckUtils]: 16: Hoare triple {6490#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,966 INFO L273 TraceCheckUtils]: 17: Hoare triple {6490#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,966 INFO L273 TraceCheckUtils]: 18: Hoare triple {6490#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,966 INFO L273 TraceCheckUtils]: 19: Hoare triple {6490#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,966 INFO L273 TraceCheckUtils]: 20: Hoare triple {6490#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,966 INFO L273 TraceCheckUtils]: 21: Hoare triple {6490#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,967 INFO L273 TraceCheckUtils]: 22: Hoare triple {6490#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,967 INFO L273 TraceCheckUtils]: 23: Hoare triple {6490#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,967 INFO L273 TraceCheckUtils]: 24: Hoare triple {6490#true} assume #t~mem32 == 8464bv32;havoc #t~mem32; {6490#true} is VALID [2018-11-14 18:08:16,967 INFO L273 TraceCheckUtils]: 25: Hoare triple {6490#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {6490#true} is VALID [2018-11-14 18:08:16,968 INFO L273 TraceCheckUtils]: 26: Hoare triple {6490#true} assume ~blastFlag~0 == 0bv32;~blastFlag~0 := 1bv32; {6490#true} is VALID [2018-11-14 18:08:16,968 INFO L273 TraceCheckUtils]: 27: Hoare triple {6490#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,968 INFO L273 TraceCheckUtils]: 28: Hoare triple {6490#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,968 INFO L273 TraceCheckUtils]: 29: Hoare triple {6490#true} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6490#true} is VALID [2018-11-14 18:08:16,968 INFO L273 TraceCheckUtils]: 30: Hoare triple {6490#true} ~skip~0 := 0bv32; {6490#true} is VALID [2018-11-14 18:08:16,969 INFO L273 TraceCheckUtils]: 31: Hoare triple {6490#true} assume true; {6490#true} is VALID [2018-11-14 18:08:16,969 INFO L273 TraceCheckUtils]: 32: Hoare triple {6490#true} assume !false; {6490#true} is VALID [2018-11-14 18:08:16,969 INFO L273 TraceCheckUtils]: 33: Hoare triple {6490#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,969 INFO L273 TraceCheckUtils]: 34: Hoare triple {6490#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,969 INFO L273 TraceCheckUtils]: 35: Hoare triple {6490#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,970 INFO L273 TraceCheckUtils]: 36: Hoare triple {6490#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,970 INFO L273 TraceCheckUtils]: 37: Hoare triple {6490#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,970 INFO L273 TraceCheckUtils]: 38: Hoare triple {6490#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,970 INFO L273 TraceCheckUtils]: 39: Hoare triple {6490#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,970 INFO L273 TraceCheckUtils]: 40: Hoare triple {6490#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,970 INFO L273 TraceCheckUtils]: 41: Hoare triple {6490#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,971 INFO L273 TraceCheckUtils]: 42: Hoare triple {6490#true} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,971 INFO L273 TraceCheckUtils]: 43: Hoare triple {6490#true} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,971 INFO L273 TraceCheckUtils]: 44: Hoare triple {6490#true} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,971 INFO L273 TraceCheckUtils]: 45: Hoare triple {6490#true} assume #t~mem35 == 8496bv32;havoc #t~mem35; {6490#true} is VALID [2018-11-14 18:08:16,971 INFO L273 TraceCheckUtils]: 46: Hoare triple {6490#true} ~ret~0 := #t~nondet70;havoc #t~nondet70; {6490#true} is VALID [2018-11-14 18:08:16,972 INFO L273 TraceCheckUtils]: 47: Hoare triple {6490#true} assume ~blastFlag~0 == 1bv32;~blastFlag~0 := 2bv32; {6490#true} is VALID [2018-11-14 18:08:16,972 INFO L273 TraceCheckUtils]: 48: Hoare triple {6490#true} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,972 INFO L273 TraceCheckUtils]: 49: Hoare triple {6490#true} assume #t~mem71 != 0bv32;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,972 INFO L273 TraceCheckUtils]: 50: Hoare triple {6490#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,973 INFO L273 TraceCheckUtils]: 51: Hoare triple {6490#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,973 INFO L273 TraceCheckUtils]: 52: Hoare triple {6490#true} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6490#true} is VALID [2018-11-14 18:08:16,973 INFO L273 TraceCheckUtils]: 53: Hoare triple {6490#true} ~skip~0 := 0bv32; {6490#true} is VALID [2018-11-14 18:08:16,973 INFO L273 TraceCheckUtils]: 54: Hoare triple {6490#true} assume true; {6490#true} is VALID [2018-11-14 18:08:16,973 INFO L273 TraceCheckUtils]: 55: Hoare triple {6490#true} assume !false; {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 56: Hoare triple {6490#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 57: Hoare triple {6490#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 58: Hoare triple {6490#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 59: Hoare triple {6490#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 60: Hoare triple {6490#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 61: Hoare triple {6490#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,974 INFO L273 TraceCheckUtils]: 62: Hoare triple {6490#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,975 INFO L273 TraceCheckUtils]: 63: Hoare triple {6490#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,975 INFO L273 TraceCheckUtils]: 64: Hoare triple {6490#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,975 INFO L273 TraceCheckUtils]: 65: Hoare triple {6490#true} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,975 INFO L273 TraceCheckUtils]: 66: Hoare triple {6490#true} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,975 INFO L273 TraceCheckUtils]: 67: Hoare triple {6490#true} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,975 INFO L273 TraceCheckUtils]: 68: Hoare triple {6490#true} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,976 INFO L273 TraceCheckUtils]: 69: Hoare triple {6490#true} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,976 INFO L273 TraceCheckUtils]: 70: Hoare triple {6490#true} assume #t~mem37 == 8512bv32;havoc #t~mem37; {6490#true} is VALID [2018-11-14 18:08:16,976 INFO L273 TraceCheckUtils]: 71: Hoare triple {6490#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32);call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); {6490#true} is VALID [2018-11-14 18:08:16,976 INFO L273 TraceCheckUtils]: 72: Hoare triple {6490#true} assume !(~bvand32(256bv32, #t~mem74) != 0bv32);havoc #t~mem74;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem73.base, #t~mem73.offset;~ret~0 := #t~nondet75;havoc #t~nondet75; {6490#true} is VALID [2018-11-14 18:08:16,978 INFO L273 TraceCheckUtils]: 73: Hoare triple {6490#true} assume ~blastFlag~0 == 2bv32;~blastFlag~0 := 6bv32; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,980 INFO L273 TraceCheckUtils]: 74: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,980 INFO L273 TraceCheckUtils]: 75: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,982 INFO L273 TraceCheckUtils]: 76: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,983 INFO L273 TraceCheckUtils]: 77: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,985 INFO L273 TraceCheckUtils]: 78: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,985 INFO L273 TraceCheckUtils]: 79: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume true; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,987 INFO L273 TraceCheckUtils]: 80: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !false; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,987 INFO L273 TraceCheckUtils]: 81: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,989 INFO L273 TraceCheckUtils]: 82: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,992 INFO L273 TraceCheckUtils]: 83: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,992 INFO L273 TraceCheckUtils]: 84: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,994 INFO L273 TraceCheckUtils]: 85: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:16,994 INFO L273 TraceCheckUtils]: 86: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,000 INFO L273 TraceCheckUtils]: 87: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,000 INFO L273 TraceCheckUtils]: 88: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,003 INFO L273 TraceCheckUtils]: 89: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,003 INFO L273 TraceCheckUtils]: 90: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,003 INFO L273 TraceCheckUtils]: 91: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,004 INFO L273 TraceCheckUtils]: 92: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,005 INFO L273 TraceCheckUtils]: 93: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,006 INFO L273 TraceCheckUtils]: 94: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,006 INFO L273 TraceCheckUtils]: 95: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,007 INFO L273 TraceCheckUtils]: 96: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,007 INFO L273 TraceCheckUtils]: 97: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,012 INFO L273 TraceCheckUtils]: 98: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,012 INFO L273 TraceCheckUtils]: 99: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume #t~mem41 == 8544bv32;havoc #t~mem41; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,012 INFO L273 TraceCheckUtils]: 100: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,013 INFO L273 TraceCheckUtils]: 101: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume ~bvand32(1bv32, #t~mem93) != 0bv32;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,013 INFO L273 TraceCheckUtils]: 102: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(~bvadd32(#t~mem95.base, #t~mem95.offset) != 0bv32);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,014 INFO L273 TraceCheckUtils]: 103: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,014 INFO L273 TraceCheckUtils]: 104: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(~bvand32(256bv32, #t~mem100) != 0bv32);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,016 INFO L273 TraceCheckUtils]: 105: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:17,016 INFO L273 TraceCheckUtils]: 106: Hoare triple {6714#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume ~blastFlag~0 == 7bv32; {6491#false} is VALID [2018-11-14 18:08:17,016 INFO L273 TraceCheckUtils]: 107: Hoare triple {6491#false} assume !false; {6491#false} is VALID [2018-11-14 18:08:17,027 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2018-11-14 18:08:17,028 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:08:17,029 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:08:17,029 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:08:17,030 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 108 [2018-11-14 18:08:17,030 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:08:17,030 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:08:17,251 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:17,251 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:08:17,251 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:08:17,251 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:17,252 INFO L87 Difference]: Start difference. First operand 513 states and 764 transitions. Second operand 3 states. [2018-11-14 18:08:23,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:23,022 INFO L93 Difference]: Finished difference Result 1012 states and 1521 transitions. [2018-11-14 18:08:23,022 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:08:23,023 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 108 [2018-11-14 18:08:23,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:08:23,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:23,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 606 transitions. [2018-11-14 18:08:23,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:23,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 606 transitions. [2018-11-14 18:08:23,039 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 606 transitions. [2018-11-14 18:08:24,816 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 606 edges. 606 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:24,848 INFO L225 Difference]: With dead ends: 1012 [2018-11-14 18:08:24,848 INFO L226 Difference]: Without dead ends: 638 [2018-11-14 18:08:24,850 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 107 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:24,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 638 states. [2018-11-14 18:08:25,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 638 to 638. [2018-11-14 18:08:25,283 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:08:25,284 INFO L82 GeneralOperation]: Start isEquivalent. First operand 638 states. Second operand 638 states. [2018-11-14 18:08:25,284 INFO L74 IsIncluded]: Start isIncluded. First operand 638 states. Second operand 638 states. [2018-11-14 18:08:25,284 INFO L87 Difference]: Start difference. First operand 638 states. Second operand 638 states. [2018-11-14 18:08:25,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:25,310 INFO L93 Difference]: Finished difference Result 638 states and 949 transitions. [2018-11-14 18:08:25,310 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 949 transitions. [2018-11-14 18:08:25,312 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:25,312 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:25,312 INFO L74 IsIncluded]: Start isIncluded. First operand 638 states. Second operand 638 states. [2018-11-14 18:08:25,312 INFO L87 Difference]: Start difference. First operand 638 states. Second operand 638 states. [2018-11-14 18:08:25,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:25,340 INFO L93 Difference]: Finished difference Result 638 states and 949 transitions. [2018-11-14 18:08:25,340 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 949 transitions. [2018-11-14 18:08:25,341 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:25,342 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:25,342 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:08:25,342 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:08:25,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 638 states. [2018-11-14 18:08:25,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 638 states to 638 states and 949 transitions. [2018-11-14 18:08:25,371 INFO L78 Accepts]: Start accepts. Automaton has 638 states and 949 transitions. Word has length 108 [2018-11-14 18:08:25,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:08:25,371 INFO L480 AbstractCegarLoop]: Abstraction has 638 states and 949 transitions. [2018-11-14 18:08:25,372 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:08:25,372 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 949 transitions. [2018-11-14 18:08:25,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2018-11-14 18:08:25,375 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:08:25,375 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:08:25,375 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:08:25,375 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:08:25,375 INFO L82 PathProgramCache]: Analyzing trace with hash -1756297572, now seen corresponding path program 1 times [2018-11-14 18:08:25,376 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:08:25,377 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:08:25,409 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:08:25,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:25,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:25,606 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:08:25,828 INFO L256 TraceCheckUtils]: 0: Hoare triple {10043#true} call ULTIMATE.init(); {10043#true} is VALID [2018-11-14 18:08:25,829 INFO L273 TraceCheckUtils]: 1: Hoare triple {10043#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,829 INFO L273 TraceCheckUtils]: 2: Hoare triple {10043#true} assume true; {10043#true} is VALID [2018-11-14 18:08:25,829 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10043#true} {10043#true} #683#return; {10043#true} is VALID [2018-11-14 18:08:25,830 INFO L256 TraceCheckUtils]: 4: Hoare triple {10043#true} call #t~ret138 := main(); {10043#true} is VALID [2018-11-14 18:08:25,830 INFO L273 TraceCheckUtils]: 5: Hoare triple {10043#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,830 INFO L256 TraceCheckUtils]: 6: Hoare triple {10043#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10043#true} is VALID [2018-11-14 18:08:25,831 INFO L273 TraceCheckUtils]: 7: Hoare triple {10043#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,831 INFO L273 TraceCheckUtils]: 8: Hoare triple {10043#true} assume ~bvadd32(#t~mem19.base, #t~mem19.offset) != 0bv32;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {10043#true} is VALID [2018-11-14 18:08:25,831 INFO L273 TraceCheckUtils]: 9: Hoare triple {10043#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {10043#true} is VALID [2018-11-14 18:08:25,832 INFO L273 TraceCheckUtils]: 10: Hoare triple {10043#true} assume !(~bvand32(12288bv32, ~tmp___1~0) != 0bv32); {10043#true} is VALID [2018-11-14 18:08:25,832 INFO L273 TraceCheckUtils]: 11: Hoare triple {10043#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,832 INFO L273 TraceCheckUtils]: 12: Hoare triple {10043#true} assume !(~bvadd32(#t~mem22.base, #t~mem22.offset) == 0bv32);havoc #t~mem22.base, #t~mem22.offset; {10043#true} is VALID [2018-11-14 18:08:25,832 INFO L273 TraceCheckUtils]: 13: Hoare triple {10043#true} assume true; {10043#true} is VALID [2018-11-14 18:08:25,832 INFO L273 TraceCheckUtils]: 14: Hoare triple {10043#true} assume !false; {10043#true} is VALID [2018-11-14 18:08:25,832 INFO L273 TraceCheckUtils]: 15: Hoare triple {10043#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,833 INFO L273 TraceCheckUtils]: 16: Hoare triple {10043#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,833 INFO L273 TraceCheckUtils]: 17: Hoare triple {10043#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,833 INFO L273 TraceCheckUtils]: 18: Hoare triple {10043#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,833 INFO L273 TraceCheckUtils]: 19: Hoare triple {10043#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,833 INFO L273 TraceCheckUtils]: 20: Hoare triple {10043#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,834 INFO L273 TraceCheckUtils]: 21: Hoare triple {10043#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,834 INFO L273 TraceCheckUtils]: 22: Hoare triple {10043#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,834 INFO L273 TraceCheckUtils]: 23: Hoare triple {10043#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,834 INFO L273 TraceCheckUtils]: 24: Hoare triple {10043#true} assume #t~mem32 == 8464bv32;havoc #t~mem32; {10043#true} is VALID [2018-11-14 18:08:25,835 INFO L273 TraceCheckUtils]: 25: Hoare triple {10043#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {10043#true} is VALID [2018-11-14 18:08:25,835 INFO L273 TraceCheckUtils]: 26: Hoare triple {10043#true} assume ~blastFlag~0 == 0bv32;~blastFlag~0 := 1bv32; {10043#true} is VALID [2018-11-14 18:08:25,835 INFO L273 TraceCheckUtils]: 27: Hoare triple {10043#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,835 INFO L273 TraceCheckUtils]: 28: Hoare triple {10043#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,835 INFO L273 TraceCheckUtils]: 29: Hoare triple {10043#true} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10043#true} is VALID [2018-11-14 18:08:25,836 INFO L273 TraceCheckUtils]: 30: Hoare triple {10043#true} ~skip~0 := 0bv32; {10043#true} is VALID [2018-11-14 18:08:25,836 INFO L273 TraceCheckUtils]: 31: Hoare triple {10043#true} assume true; {10043#true} is VALID [2018-11-14 18:08:25,836 INFO L273 TraceCheckUtils]: 32: Hoare triple {10043#true} assume !false; {10043#true} is VALID [2018-11-14 18:08:25,836 INFO L273 TraceCheckUtils]: 33: Hoare triple {10043#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,836 INFO L273 TraceCheckUtils]: 34: Hoare triple {10043#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,837 INFO L273 TraceCheckUtils]: 35: Hoare triple {10043#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,837 INFO L273 TraceCheckUtils]: 36: Hoare triple {10043#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,837 INFO L273 TraceCheckUtils]: 37: Hoare triple {10043#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,837 INFO L273 TraceCheckUtils]: 38: Hoare triple {10043#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,837 INFO L273 TraceCheckUtils]: 39: Hoare triple {10043#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,838 INFO L273 TraceCheckUtils]: 40: Hoare triple {10043#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,838 INFO L273 TraceCheckUtils]: 41: Hoare triple {10043#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,838 INFO L273 TraceCheckUtils]: 42: Hoare triple {10043#true} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,838 INFO L273 TraceCheckUtils]: 43: Hoare triple {10043#true} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,838 INFO L273 TraceCheckUtils]: 44: Hoare triple {10043#true} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,839 INFO L273 TraceCheckUtils]: 45: Hoare triple {10043#true} assume #t~mem35 == 8496bv32;havoc #t~mem35; {10043#true} is VALID [2018-11-14 18:08:25,839 INFO L273 TraceCheckUtils]: 46: Hoare triple {10043#true} ~ret~0 := #t~nondet70;havoc #t~nondet70; {10043#true} is VALID [2018-11-14 18:08:25,839 INFO L273 TraceCheckUtils]: 47: Hoare triple {10043#true} assume ~blastFlag~0 == 1bv32;~blastFlag~0 := 2bv32; {10043#true} is VALID [2018-11-14 18:08:25,839 INFO L273 TraceCheckUtils]: 48: Hoare triple {10043#true} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 49: Hoare triple {10043#true} assume #t~mem71 != 0bv32;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 50: Hoare triple {10043#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 51: Hoare triple {10043#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 52: Hoare triple {10043#true} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 53: Hoare triple {10043#true} ~skip~0 := 0bv32; {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 54: Hoare triple {10043#true} assume true; {10043#true} is VALID [2018-11-14 18:08:25,840 INFO L273 TraceCheckUtils]: 55: Hoare triple {10043#true} assume !false; {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 56: Hoare triple {10043#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 57: Hoare triple {10043#true} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 58: Hoare triple {10043#true} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 59: Hoare triple {10043#true} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 60: Hoare triple {10043#true} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 61: Hoare triple {10043#true} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,841 INFO L273 TraceCheckUtils]: 62: Hoare triple {10043#true} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,842 INFO L273 TraceCheckUtils]: 63: Hoare triple {10043#true} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,842 INFO L273 TraceCheckUtils]: 64: Hoare triple {10043#true} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,842 INFO L273 TraceCheckUtils]: 65: Hoare triple {10043#true} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,842 INFO L273 TraceCheckUtils]: 66: Hoare triple {10043#true} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,842 INFO L273 TraceCheckUtils]: 67: Hoare triple {10043#true} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,843 INFO L273 TraceCheckUtils]: 68: Hoare triple {10043#true} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,843 INFO L273 TraceCheckUtils]: 69: Hoare triple {10043#true} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,843 INFO L273 TraceCheckUtils]: 70: Hoare triple {10043#true} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,843 INFO L273 TraceCheckUtils]: 71: Hoare triple {10043#true} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,844 INFO L273 TraceCheckUtils]: 72: Hoare triple {10043#true} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,844 INFO L273 TraceCheckUtils]: 73: Hoare triple {10043#true} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,844 INFO L273 TraceCheckUtils]: 74: Hoare triple {10043#true} assume !(#t~mem41 == 8544bv32);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,844 INFO L273 TraceCheckUtils]: 75: Hoare triple {10043#true} assume !(#t~mem42 == 8545bv32);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,844 INFO L273 TraceCheckUtils]: 76: Hoare triple {10043#true} assume !(#t~mem43 == 8560bv32);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,845 INFO L273 TraceCheckUtils]: 77: Hoare triple {10043#true} assume !(#t~mem44 == 8561bv32);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,845 INFO L273 TraceCheckUtils]: 78: Hoare triple {10043#true} assume !(#t~mem45 == 8448bv32);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,845 INFO L273 TraceCheckUtils]: 79: Hoare triple {10043#true} assume !(#t~mem46 == 8576bv32);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,845 INFO L273 TraceCheckUtils]: 80: Hoare triple {10043#true} assume !(#t~mem47 == 8577bv32);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,846 INFO L273 TraceCheckUtils]: 81: Hoare triple {10043#true} assume !(#t~mem48 == 8592bv32);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,846 INFO L273 TraceCheckUtils]: 82: Hoare triple {10043#true} assume !(#t~mem49 == 8593bv32);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,846 INFO L273 TraceCheckUtils]: 83: Hoare triple {10043#true} assume !(#t~mem50 == 8608bv32);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,846 INFO L273 TraceCheckUtils]: 84: Hoare triple {10043#true} assume !(#t~mem51 == 8609bv32);havoc #t~mem51;call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,847 INFO L273 TraceCheckUtils]: 85: Hoare triple {10043#true} assume !(#t~mem52 == 8640bv32);havoc #t~mem52;call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,847 INFO L273 TraceCheckUtils]: 86: Hoare triple {10043#true} assume !(#t~mem53 == 8641bv32);havoc #t~mem53;call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10043#true} is VALID [2018-11-14 18:08:25,847 INFO L273 TraceCheckUtils]: 87: Hoare triple {10043#true} assume #t~mem54 == 8656bv32;havoc #t~mem54; {10043#true} is VALID [2018-11-14 18:08:25,847 INFO L273 TraceCheckUtils]: 88: Hoare triple {10043#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, ~bvadd32(836bv32, #t~mem118.offset), 4bv32);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, ~bvadd32(172bv32, #t~mem117.offset), 4bv32);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem119.base, #t~mem119.offset; {10043#true} is VALID [2018-11-14 18:08:25,848 INFO L273 TraceCheckUtils]: 89: Hoare triple {10043#true} assume !(~tmp___9~0 == 0bv32);~ret~0 := #t~nondet120;havoc #t~nondet120; {10043#true} is VALID [2018-11-14 18:08:25,854 INFO L273 TraceCheckUtils]: 90: Hoare triple {10043#true} assume ~blastFlag~0 == 2bv32;~blastFlag~0 := 3bv32; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,862 INFO L273 TraceCheckUtils]: 91: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,864 INFO L273 TraceCheckUtils]: 92: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(~tmp___10~0 == 0bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,866 INFO L273 TraceCheckUtils]: 93: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,866 INFO L273 TraceCheckUtils]: 94: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,868 INFO L273 TraceCheckUtils]: 95: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,868 INFO L273 TraceCheckUtils]: 96: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume true; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,870 INFO L273 TraceCheckUtils]: 97: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !false; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,870 INFO L273 TraceCheckUtils]: 98: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,872 INFO L273 TraceCheckUtils]: 99: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,872 INFO L273 TraceCheckUtils]: 100: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,874 INFO L273 TraceCheckUtils]: 101: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,874 INFO L273 TraceCheckUtils]: 102: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,876 INFO L273 TraceCheckUtils]: 103: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,876 INFO L273 TraceCheckUtils]: 104: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,878 INFO L273 TraceCheckUtils]: 105: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,878 INFO L273 TraceCheckUtils]: 106: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,880 INFO L273 TraceCheckUtils]: 107: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,880 INFO L273 TraceCheckUtils]: 108: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,882 INFO L273 TraceCheckUtils]: 109: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,882 INFO L273 TraceCheckUtils]: 110: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,884 INFO L273 TraceCheckUtils]: 111: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,884 INFO L273 TraceCheckUtils]: 112: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,887 INFO L273 TraceCheckUtils]: 113: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,887 INFO L273 TraceCheckUtils]: 114: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,887 INFO L273 TraceCheckUtils]: 115: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,888 INFO L273 TraceCheckUtils]: 116: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume #t~mem41 == 8544bv32;havoc #t~mem41; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,888 INFO L273 TraceCheckUtils]: 117: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,888 INFO L273 TraceCheckUtils]: 118: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume ~bvand32(1bv32, #t~mem93) != 0bv32;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,889 INFO L273 TraceCheckUtils]: 119: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(~bvadd32(#t~mem95.base, #t~mem95.offset) != 0bv32);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,889 INFO L273 TraceCheckUtils]: 120: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,889 INFO L273 TraceCheckUtils]: 121: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(~bvand32(256bv32, #t~mem100) != 0bv32);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,890 INFO L273 TraceCheckUtils]: 122: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 18:08:25,890 INFO L273 TraceCheckUtils]: 123: Hoare triple {10318#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume ~blastFlag~0 == 7bv32; {10044#false} is VALID [2018-11-14 18:08:25,890 INFO L273 TraceCheckUtils]: 124: Hoare triple {10044#false} assume !false; {10044#false} is VALID [2018-11-14 18:08:25,899 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 54 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2018-11-14 18:08:25,899 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:08:25,901 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:08:25,901 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 18:08:25,902 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 125 [2018-11-14 18:08:25,902 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:08:25,902 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 18:08:26,182 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:26,182 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 18:08:26,183 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 18:08:26,183 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:26,184 INFO L87 Difference]: Start difference. First operand 638 states and 949 transitions. Second operand 3 states. [2018-11-14 18:08:32,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:32,607 INFO L93 Difference]: Finished difference Result 1260 states and 1888 transitions. [2018-11-14 18:08:32,607 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 18:08:32,608 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 125 [2018-11-14 18:08:32,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:08:32,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:32,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-14 18:08:32,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 18:08:32,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-14 18:08:32,618 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 603 transitions. [2018-11-14 18:08:33,841 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:33,870 INFO L225 Difference]: With dead ends: 1260 [2018-11-14 18:08:33,870 INFO L226 Difference]: Without dead ends: 761 [2018-11-14 18:08:33,872 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 18:08:33,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 761 states. [2018-11-14 18:08:34,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 761 to 761. [2018-11-14 18:08:34,010 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:08:34,010 INFO L82 GeneralOperation]: Start isEquivalent. First operand 761 states. Second operand 761 states. [2018-11-14 18:08:34,010 INFO L74 IsIncluded]: Start isIncluded. First operand 761 states. Second operand 761 states. [2018-11-14 18:08:34,010 INFO L87 Difference]: Start difference. First operand 761 states. Second operand 761 states. [2018-11-14 18:08:34,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:34,040 INFO L93 Difference]: Finished difference Result 761 states and 1131 transitions. [2018-11-14 18:08:34,040 INFO L276 IsEmpty]: Start isEmpty. Operand 761 states and 1131 transitions. [2018-11-14 18:08:34,042 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:34,042 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:34,043 INFO L74 IsIncluded]: Start isIncluded. First operand 761 states. Second operand 761 states. [2018-11-14 18:08:34,043 INFO L87 Difference]: Start difference. First operand 761 states. Second operand 761 states. [2018-11-14 18:08:34,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:34,073 INFO L93 Difference]: Finished difference Result 761 states and 1131 transitions. [2018-11-14 18:08:34,073 INFO L276 IsEmpty]: Start isEmpty. Operand 761 states and 1131 transitions. [2018-11-14 18:08:34,075 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:08:34,075 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:08:34,075 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:08:34,075 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:08:34,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 761 states. [2018-11-14 18:08:34,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 761 states to 761 states and 1131 transitions. [2018-11-14 18:08:34,112 INFO L78 Accepts]: Start accepts. Automaton has 761 states and 1131 transitions. Word has length 125 [2018-11-14 18:08:34,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:08:34,113 INFO L480 AbstractCegarLoop]: Abstraction has 761 states and 1131 transitions. [2018-11-14 18:08:34,113 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 18:08:34,113 INFO L276 IsEmpty]: Start isEmpty. Operand 761 states and 1131 transitions. [2018-11-14 18:08:34,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2018-11-14 18:08:34,116 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:08:34,116 INFO L375 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:08:34,116 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:08:34,117 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:08:34,117 INFO L82 PathProgramCache]: Analyzing trace with hash -917195056, now seen corresponding path program 1 times [2018-11-14 18:08:34,118 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:08:34,118 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:08:34,149 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:08:34,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:34,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 18:08:34,822 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-14 18:08:34,943 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 10 [2018-11-14 18:08:34,956 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2018-11-14 18:08:34,958 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:08:34,961 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:08:34,973 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:08:34,973 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:17, output treesize:13 [2018-11-14 18:08:35,069 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 18 [2018-11-14 18:08:35,077 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:08:35,078 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:08:35,080 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 37 [2018-11-14 18:08:35,086 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:08:35,125 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:08:35,136 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:08:35,137 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:26, output treesize:22 [2018-11-14 18:08:35,605 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 18 [2018-11-14 18:08:35,692 INFO L700 Elim1Store]: detected not equals via solver [2018-11-14 18:08:35,693 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 10 [2018-11-14 18:08:35,696 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-14 18:08:35,700 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:08:35,701 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-14 18:08:35,702 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 2 variables, input treesize:24, output treesize:5 [2018-11-14 18:08:35,705 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-14 18:08:35,845 INFO L256 TraceCheckUtils]: 0: Hoare triple {14330#true} call ULTIMATE.init(); {14330#true} is VALID [2018-11-14 18:08:35,845 INFO L273 TraceCheckUtils]: 1: Hoare triple {14330#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~unchecked~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {14330#true} is VALID [2018-11-14 18:08:35,846 INFO L273 TraceCheckUtils]: 2: Hoare triple {14330#true} assume true; {14330#true} is VALID [2018-11-14 18:08:35,846 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14330#true} {14330#true} #683#return; {14330#true} is VALID [2018-11-14 18:08:35,846 INFO L256 TraceCheckUtils]: 4: Hoare triple {14330#true} call #t~ret138 := main(); {14330#true} is VALID [2018-11-14 18:08:35,848 INFO L273 TraceCheckUtils]: 5: Hoare triple {14330#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {14350#(= main_~s~0.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,848 INFO L256 TraceCheckUtils]: 6: Hoare triple {14350#(= main_~s~0.offset (_ bv0 32))} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14354#(= (_ bv0 32) |ssl3_accept_#in~s.offset|)} is VALID [2018-11-14 18:08:35,849 INFO L273 TraceCheckUtils]: 7: Hoare triple {14354#(= (_ bv0 32) |ssl3_accept_#in~s.offset|)} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,850 INFO L273 TraceCheckUtils]: 8: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume ~bvadd32(#t~mem19.base, #t~mem19.offset) != 0bv32;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,850 INFO L273 TraceCheckUtils]: 9: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,851 INFO L273 TraceCheckUtils]: 10: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(~bvand32(12288bv32, ~tmp___1~0) != 0bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,851 INFO L273 TraceCheckUtils]: 11: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,852 INFO L273 TraceCheckUtils]: 12: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(~bvadd32(#t~mem22.base, #t~mem22.offset) == 0bv32);havoc #t~mem22.base, #t~mem22.offset; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,852 INFO L273 TraceCheckUtils]: 13: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume true; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,853 INFO L273 TraceCheckUtils]: 14: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !false; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,853 INFO L273 TraceCheckUtils]: 15: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,854 INFO L273 TraceCheckUtils]: 16: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,854 INFO L273 TraceCheckUtils]: 17: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,855 INFO L273 TraceCheckUtils]: 18: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,855 INFO L273 TraceCheckUtils]: 19: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,856 INFO L273 TraceCheckUtils]: 20: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,857 INFO L273 TraceCheckUtils]: 21: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,858 INFO L273 TraceCheckUtils]: 22: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,858 INFO L273 TraceCheckUtils]: 23: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,859 INFO L273 TraceCheckUtils]: 24: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume #t~mem32 == 8464bv32;havoc #t~mem32; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,859 INFO L273 TraceCheckUtils]: 25: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,860 INFO L273 TraceCheckUtils]: 26: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume ~blastFlag~0 == 0bv32;~blastFlag~0 := 1bv32; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,860 INFO L273 TraceCheckUtils]: 27: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,861 INFO L273 TraceCheckUtils]: 28: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,861 INFO L273 TraceCheckUtils]: 29: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,862 INFO L273 TraceCheckUtils]: 30: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} ~skip~0 := 0bv32; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,863 INFO L273 TraceCheckUtils]: 31: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume true; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,863 INFO L273 TraceCheckUtils]: 32: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !false; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,864 INFO L273 TraceCheckUtils]: 33: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,864 INFO L273 TraceCheckUtils]: 34: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,865 INFO L273 TraceCheckUtils]: 35: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,865 INFO L273 TraceCheckUtils]: 36: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,866 INFO L273 TraceCheckUtils]: 37: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,866 INFO L273 TraceCheckUtils]: 38: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,867 INFO L273 TraceCheckUtils]: 39: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,867 INFO L273 TraceCheckUtils]: 40: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,870 INFO L273 TraceCheckUtils]: 41: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,871 INFO L273 TraceCheckUtils]: 42: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,871 INFO L273 TraceCheckUtils]: 43: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,871 INFO L273 TraceCheckUtils]: 44: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,872 INFO L273 TraceCheckUtils]: 45: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume #t~mem35 == 8496bv32;havoc #t~mem35; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,883 INFO L273 TraceCheckUtils]: 46: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} ~ret~0 := #t~nondet70;havoc #t~nondet70; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,883 INFO L273 TraceCheckUtils]: 47: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume ~blastFlag~0 == 1bv32;~blastFlag~0 := 2bv32; {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,884 INFO L273 TraceCheckUtils]: 48: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {14358#(= ssl3_accept_~s.offset (_ bv0 32))} is VALID [2018-11-14 18:08:35,885 INFO L273 TraceCheckUtils]: 49: Hoare triple {14358#(= ssl3_accept_~s.offset (_ bv0 32))} assume #t~mem71 != 0bv32;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14485#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))))} is VALID [2018-11-14 18:08:35,886 INFO L273 TraceCheckUtils]: 50: Hoare triple {14485#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))))} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,889 INFO L273 TraceCheckUtils]: 51: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,890 INFO L273 TraceCheckUtils]: 52: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,892 INFO L273 TraceCheckUtils]: 53: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} ~skip~0 := 0bv32; {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,893 INFO L273 TraceCheckUtils]: 54: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume true; {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,895 INFO L273 TraceCheckUtils]: 55: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !false; {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,896 INFO L273 TraceCheckUtils]: 56: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,897 INFO L273 TraceCheckUtils]: 57: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,899 INFO L273 TraceCheckUtils]: 58: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,901 INFO L273 TraceCheckUtils]: 59: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,903 INFO L273 TraceCheckUtils]: 60: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,904 INFO L273 TraceCheckUtils]: 61: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,905 INFO L273 TraceCheckUtils]: 62: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,907 INFO L273 TraceCheckUtils]: 63: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,908 INFO L273 TraceCheckUtils]: 64: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,909 INFO L273 TraceCheckUtils]: 65: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,910 INFO L273 TraceCheckUtils]: 66: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,930 INFO L273 TraceCheckUtils]: 67: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,931 INFO L273 TraceCheckUtils]: 68: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} is VALID [2018-11-14 18:08:35,932 INFO L273 TraceCheckUtils]: 69: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv8656 32) (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (= (select (select |#memory_int| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv64 32))) (_ bv0 32)))} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14547#(= (_ bv8656 32) |ssl3_accept_#t~mem37|)} is VALID [2018-11-14 18:08:35,932 INFO L273 TraceCheckUtils]: 70: Hoare triple {14547#(= (_ bv8656 32) |ssl3_accept_#t~mem37|)} assume #t~mem37 == 8512bv32;havoc #t~mem37; {14331#false} is VALID [2018-11-14 18:08:35,932 INFO L273 TraceCheckUtils]: 71: Hoare triple {14331#false} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32);call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,933 INFO L273 TraceCheckUtils]: 72: Hoare triple {14331#false} assume !(~bvand32(256bv32, #t~mem74) != 0bv32);havoc #t~mem74;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem73.base, #t~mem73.offset;~ret~0 := #t~nondet75;havoc #t~nondet75; {14331#false} is VALID [2018-11-14 18:08:35,933 INFO L273 TraceCheckUtils]: 73: Hoare triple {14331#false} assume ~blastFlag~0 == 2bv32;~blastFlag~0 := 6bv32; {14331#false} is VALID [2018-11-14 18:08:35,933 INFO L273 TraceCheckUtils]: 74: Hoare triple {14331#false} assume !~bvsle32(~ret~0, 0bv32); {14331#false} is VALID [2018-11-14 18:08:35,933 INFO L273 TraceCheckUtils]: 75: Hoare triple {14331#false} call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,934 INFO L273 TraceCheckUtils]: 76: Hoare triple {14331#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,934 INFO L273 TraceCheckUtils]: 77: Hoare triple {14331#false} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14331#false} is VALID [2018-11-14 18:08:35,934 INFO L273 TraceCheckUtils]: 78: Hoare triple {14331#false} ~skip~0 := 0bv32; {14331#false} is VALID [2018-11-14 18:08:35,934 INFO L273 TraceCheckUtils]: 79: Hoare triple {14331#false} assume true; {14331#false} is VALID [2018-11-14 18:08:35,934 INFO L273 TraceCheckUtils]: 80: Hoare triple {14331#false} assume !false; {14331#false} is VALID [2018-11-14 18:08:35,935 INFO L273 TraceCheckUtils]: 81: Hoare triple {14331#false} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,935 INFO L273 TraceCheckUtils]: 82: Hoare triple {14331#false} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,935 INFO L273 TraceCheckUtils]: 83: Hoare triple {14331#false} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,935 INFO L273 TraceCheckUtils]: 84: Hoare triple {14331#false} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 85: Hoare triple {14331#false} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 86: Hoare triple {14331#false} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 87: Hoare triple {14331#false} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 88: Hoare triple {14331#false} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 89: Hoare triple {14331#false} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 90: Hoare triple {14331#false} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,936 INFO L273 TraceCheckUtils]: 91: Hoare triple {14331#false} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,937 INFO L273 TraceCheckUtils]: 92: Hoare triple {14331#false} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,937 INFO L273 TraceCheckUtils]: 93: Hoare triple {14331#false} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,937 INFO L273 TraceCheckUtils]: 94: Hoare triple {14331#false} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,937 INFO L273 TraceCheckUtils]: 95: Hoare triple {14331#false} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,937 INFO L273 TraceCheckUtils]: 96: Hoare triple {14331#false} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,938 INFO L273 TraceCheckUtils]: 97: Hoare triple {14331#false} assume #t~mem39 == 8528bv32;havoc #t~mem39; {14331#false} is VALID [2018-11-14 18:08:35,938 INFO L273 TraceCheckUtils]: 98: Hoare triple {14331#false} call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, ~bvadd32(836bv32, #t~mem76.offset), 4bv32);call #t~mem78 := read~intINTTYPE4(#t~mem77.base, ~bvadd32(12bv32, #t~mem77.offset), 4bv32);~l~0 := #t~mem78;havoc #t~mem78;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem77.base, #t~mem77.offset;call #t~mem79 := read~intINTTYPE4(~s.base, ~bvadd32(232bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,938 INFO L273 TraceCheckUtils]: 99: Hoare triple {14331#false} assume ~bvand32(2097152bv32, #t~mem79) != 0bv32;havoc #t~mem79;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem80.base, ~bvadd32(871bv32, #t~mem80.offset), 4bv32);havoc #t~mem80.base, #t~mem80.offset; {14331#false} is VALID [2018-11-14 18:08:35,938 INFO L273 TraceCheckUtils]: 100: Hoare triple {14331#false} call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem83 := read~intINTTYPE4(#t~mem82.base, ~bvadd32(871bv32, #t~mem82.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,938 INFO L273 TraceCheckUtils]: 101: Hoare triple {14331#false} assume #t~mem83 != 0bv32;havoc #t~mem82.base, #t~mem82.offset;havoc #t~mem83; {14331#false} is VALID [2018-11-14 18:08:35,939 INFO L273 TraceCheckUtils]: 102: Hoare triple {14331#false} ~ret~0 := #t~nondet92;havoc #t~nondet92; {14331#false} is VALID [2018-11-14 18:08:35,939 INFO L273 TraceCheckUtils]: 103: Hoare triple {14331#false} assume ~blastFlag~0 == 6bv32;~blastFlag~0 := 7bv32; {14331#false} is VALID [2018-11-14 18:08:35,939 INFO L273 TraceCheckUtils]: 104: Hoare triple {14331#false} assume !~bvsle32(~ret~0, 0bv32); {14331#false} is VALID [2018-11-14 18:08:35,939 INFO L273 TraceCheckUtils]: 105: Hoare triple {14331#false} call write~intINTTYPE4(8544bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,939 INFO L273 TraceCheckUtils]: 106: Hoare triple {14331#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,940 INFO L273 TraceCheckUtils]: 107: Hoare triple {14331#false} assume !(#t~mem128 == 0bv32);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14331#false} is VALID [2018-11-14 18:08:35,940 INFO L273 TraceCheckUtils]: 108: Hoare triple {14331#false} ~skip~0 := 0bv32; {14331#false} is VALID [2018-11-14 18:08:35,940 INFO L273 TraceCheckUtils]: 109: Hoare triple {14331#false} assume true; {14331#false} is VALID [2018-11-14 18:08:35,940 INFO L273 TraceCheckUtils]: 110: Hoare triple {14331#false} assume !false; {14331#false} is VALID [2018-11-14 18:08:35,940 INFO L273 TraceCheckUtils]: 111: Hoare triple {14331#false} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,941 INFO L273 TraceCheckUtils]: 112: Hoare triple {14331#false} assume !(#t~mem24 == 12292bv32);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,941 INFO L273 TraceCheckUtils]: 113: Hoare triple {14331#false} assume !(#t~mem25 == 16384bv32);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,941 INFO L273 TraceCheckUtils]: 114: Hoare triple {14331#false} assume !(#t~mem26 == 8192bv32);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,941 INFO L273 TraceCheckUtils]: 115: Hoare triple {14331#false} assume !(#t~mem27 == 24576bv32);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,941 INFO L273 TraceCheckUtils]: 116: Hoare triple {14331#false} assume !(#t~mem28 == 8195bv32);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,942 INFO L273 TraceCheckUtils]: 117: Hoare triple {14331#false} assume !(#t~mem29 == 8480bv32);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,942 INFO L273 TraceCheckUtils]: 118: Hoare triple {14331#false} assume !(#t~mem30 == 8481bv32);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,942 INFO L273 TraceCheckUtils]: 119: Hoare triple {14331#false} assume !(#t~mem31 == 8482bv32);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,942 INFO L273 TraceCheckUtils]: 120: Hoare triple {14331#false} assume !(#t~mem32 == 8464bv32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,942 INFO L273 TraceCheckUtils]: 121: Hoare triple {14331#false} assume !(#t~mem33 == 8465bv32);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,942 INFO L273 TraceCheckUtils]: 122: Hoare triple {14331#false} assume !(#t~mem34 == 8466bv32);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,943 INFO L273 TraceCheckUtils]: 123: Hoare triple {14331#false} assume !(#t~mem35 == 8496bv32);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,943 INFO L273 TraceCheckUtils]: 124: Hoare triple {14331#false} assume !(#t~mem36 == 8497bv32);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,943 INFO L273 TraceCheckUtils]: 125: Hoare triple {14331#false} assume !(#t~mem37 == 8512bv32);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,943 INFO L273 TraceCheckUtils]: 126: Hoare triple {14331#false} assume !(#t~mem38 == 8513bv32);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,943 INFO L273 TraceCheckUtils]: 127: Hoare triple {14331#false} assume !(#t~mem39 == 8528bv32);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,944 INFO L273 TraceCheckUtils]: 128: Hoare triple {14331#false} assume !(#t~mem40 == 8529bv32);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,944 INFO L273 TraceCheckUtils]: 129: Hoare triple {14331#false} assume #t~mem41 == 8544bv32;havoc #t~mem41; {14331#false} is VALID [2018-11-14 18:08:35,944 INFO L273 TraceCheckUtils]: 130: Hoare triple {14331#false} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,944 INFO L273 TraceCheckUtils]: 131: Hoare triple {14331#false} assume ~bvand32(1bv32, #t~mem93) != 0bv32;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,944 INFO L273 TraceCheckUtils]: 132: Hoare triple {14331#false} assume !(~bvadd32(#t~mem95.base, #t~mem95.offset) != 0bv32);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {14331#false} is VALID [2018-11-14 18:08:35,944 INFO L273 TraceCheckUtils]: 133: Hoare triple {14331#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {14331#false} is VALID [2018-11-14 18:08:35,945 INFO L273 TraceCheckUtils]: 134: Hoare triple {14331#false} assume !(~bvand32(256bv32, #t~mem100) != 0bv32);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {14331#false} is VALID [2018-11-14 18:08:35,945 INFO L273 TraceCheckUtils]: 135: Hoare triple {14331#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {14331#false} is VALID [2018-11-14 18:08:35,945 INFO L273 TraceCheckUtils]: 136: Hoare triple {14331#false} assume ~blastFlag~0 == 7bv32; {14331#false} is VALID [2018-11-14 18:08:35,945 INFO L273 TraceCheckUtils]: 137: Hoare triple {14331#false} assume !false; {14331#false} is VALID [2018-11-14 18:08:35,973 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 130 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2018-11-14 18:08:35,974 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-14 18:08:35,978 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 18:08:35,978 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-14 18:08:35,978 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 138 [2018-11-14 18:08:35,979 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 18:08:35,979 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2018-11-14 18:08:36,170 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 106 edges. 106 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:36,170 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-14 18:08:36,171 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-14 18:08:36,171 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2018-11-14 18:08:36,171 INFO L87 Difference]: Start difference. First operand 761 states and 1131 transitions. Second operand 8 states. [2018-11-14 18:08:57,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:08:57,923 INFO L93 Difference]: Finished difference Result 2168 states and 3223 transitions. [2018-11-14 18:08:57,923 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-14 18:08:57,923 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 138 [2018-11-14 18:08:57,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 18:08:57,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-14 18:08:57,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 583 transitions. [2018-11-14 18:08:57,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2018-11-14 18:08:57,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 583 transitions. [2018-11-14 18:08:57,931 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 583 transitions. [2018-11-14 18:08:58,886 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 583 edges. 583 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 18:08:58,991 INFO L225 Difference]: With dead ends: 2168 [2018-11-14 18:08:58,991 INFO L226 Difference]: Without dead ends: 1421 [2018-11-14 18:08:58,992 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=44, Invalid=88, Unknown=0, NotChecked=0, Total=132 [2018-11-14 18:08:58,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1421 states. [2018-11-14 18:09:00,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1421 to 922. [2018-11-14 18:09:00,081 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 18:09:00,081 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1421 states. Second operand 922 states. [2018-11-14 18:09:00,081 INFO L74 IsIncluded]: Start isIncluded. First operand 1421 states. Second operand 922 states. [2018-11-14 18:09:00,081 INFO L87 Difference]: Start difference. First operand 1421 states. Second operand 922 states. [2018-11-14 18:09:00,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:09:00,143 INFO L93 Difference]: Finished difference Result 1421 states and 2103 transitions. [2018-11-14 18:09:00,143 INFO L276 IsEmpty]: Start isEmpty. Operand 1421 states and 2103 transitions. [2018-11-14 18:09:00,146 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:09:00,146 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:09:00,146 INFO L74 IsIncluded]: Start isIncluded. First operand 922 states. Second operand 1421 states. [2018-11-14 18:09:00,146 INFO L87 Difference]: Start difference. First operand 922 states. Second operand 1421 states. [2018-11-14 18:09:00,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 18:09:00,228 INFO L93 Difference]: Finished difference Result 1421 states and 2103 transitions. [2018-11-14 18:09:00,228 INFO L276 IsEmpty]: Start isEmpty. Operand 1421 states and 2103 transitions. [2018-11-14 18:09:00,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 18:09:00,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 18:09:00,230 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 18:09:00,230 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 18:09:00,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 922 states. [2018-11-14 18:09:00,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 922 states to 922 states and 1400 transitions. [2018-11-14 18:09:00,273 INFO L78 Accepts]: Start accepts. Automaton has 922 states and 1400 transitions. Word has length 138 [2018-11-14 18:09:00,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 18:09:00,273 INFO L480 AbstractCegarLoop]: Abstraction has 922 states and 1400 transitions. [2018-11-14 18:09:00,273 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-14 18:09:00,273 INFO L276 IsEmpty]: Start isEmpty. Operand 922 states and 1400 transitions. [2018-11-14 18:09:00,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2018-11-14 18:09:00,275 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 18:09:00,276 INFO L375 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 18:09:00,276 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 18:09:00,276 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 18:09:00,276 INFO L82 PathProgramCache]: Analyzing trace with hash -1687928622, now seen corresponding path program 1 times [2018-11-14 18:09:00,277 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-14 18:09:00,277 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-14 18:09:00,301 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 18:09:01,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-14 18:09:02,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-14 18:09:02,606 INFO L442 BasicCegarLoop]: Counterexample might be feasible [2018-11-14 18:09:02,692 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-14 18:09:02,693 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-14 18:09:02,805 WARN L170 areAnnotationChecker]: SSLv3_server_methodENTRY has no Hoare annotation [2018-11-14 18:09:02,805 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-14 18:09:02,805 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-14 18:09:02,805 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-14 18:09:02,805 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-14 18:09:02,805 WARN L170 areAnnotationChecker]: #Ultimate.C_memcpyENTRY has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: sslv3_base_methodENTRY has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: #Ultimate.meminitENTRY has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: ssl3_acceptENTRY has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: ssl3_get_server_methodENTRY has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: L1049 has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: L1049 has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-14 18:09:02,806 WARN L170 areAnnotationChecker]: L1074 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L1074 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L-1-1 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L-1-1 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L1736 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L1736 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L-1-1 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L-1-1 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-14 18:09:02,807 WARN L170 areAnnotationChecker]: L1032 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: L1032 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: L1051 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: L1051 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: L1049-2 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: L1074-1 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: #Ultimate.C_memcpyFINAL has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: L1736-1 has no Hoare annotation [2018-11-14 18:09:02,808 WARN L170 areAnnotationChecker]: #Ultimate.meminitFINAL has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: L1115-2 has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: L1034 has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: L1034 has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: ssl3_get_server_methodFINAL has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: L1051-1 has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: SSLv3_server_methodFINAL has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: #Ultimate.C_memcpyEXIT has no Hoare annotation [2018-11-14 18:09:02,809 WARN L170 areAnnotationChecker]: sslv3_base_methodFINAL has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: #Ultimate.meminitEXIT has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: L1034-1 has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: L1053 has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: L1053 has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: SSLv3_server_methodEXIT has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-14 18:09:02,810 WARN L170 areAnnotationChecker]: L1053-1 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: sslv3_base_methodEXIT has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1121-1 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: ssl3_acceptFINAL has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1136-3 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: L1136-3 has no Hoare annotation [2018-11-14 18:09:02,811 WARN L170 areAnnotationChecker]: ssl3_acceptEXIT has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1136-1 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1136-1 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1716 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1137 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1720 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1720 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1720-2 has no Hoare annotation [2018-11-14 18:09:02,812 WARN L170 areAnnotationChecker]: L1140 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1249 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-14 18:09:02,813 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1254-2 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-14 18:09:02,814 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-14 18:09:02,815 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1647 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1161 has no Hoare annotation [2018-11-14 18:09:02,816 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1685 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1685 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-14 18:09:02,817 WARN L170 areAnnotationChecker]: L1686 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1686 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1685-1 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1687 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1687 has no Hoare annotation [2018-11-14 18:09:02,818 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1689 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1689 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1687-2 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1687-2 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-14 18:09:02,819 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1698 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1698 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-14 18:09:02,820 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1352-2 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1361-2 has no Hoare annotation [2018-11-14 18:09:02,821 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1188 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1365-2 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1365-2 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-14 18:09:02,822 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1382-2 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1433 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1433 has no Hoare annotation [2018-11-14 18:09:02,823 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1404 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1390 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1390 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-14 18:09:02,824 WARN L170 areAnnotationChecker]: L1406 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1406 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1443 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1480 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1480 has no Hoare annotation [2018-11-14 18:09:02,825 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1406-2 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1406-2 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1394 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1394 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1393-1 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1444 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1444 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-14 18:09:02,826 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1445 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1445 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1453 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-14 18:09:02,827 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1490-1 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1209 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1398 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1398 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1456 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1456 has no Hoare annotation [2018-11-14 18:09:02,828 WARN L170 areAnnotationChecker]: L1508 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1508 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1398-2 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1398-2 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1555 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1555 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-14 18:09:02,829 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1513 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1513 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1215 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1517 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1517 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1529 has no Hoare annotation [2018-11-14 18:09:02,830 WARN L170 areAnnotationChecker]: L1529 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1221 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1540 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1540 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-14 18:09:02,831 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1557-2 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1557-2 has no Hoare annotation [2018-11-14 18:09:02,832 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1233 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1569 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1569 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1557 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1557 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1579 has no Hoare annotation [2018-11-14 18:09:02,833 WARN L170 areAnnotationChecker]: L1579 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1569-2 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1586 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1586 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1239 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1586-2 has no Hoare annotation [2018-11-14 18:09:02,834 WARN L170 areAnnotationChecker]: L1586-2 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1608 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1608 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1598 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1598 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1608-2 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1608-2 has no Hoare annotation [2018-11-14 18:09:02,835 WARN L170 areAnnotationChecker]: L1242 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1245 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1619 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1619 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1629 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1629 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1619-2 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1633 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1633 has no Hoare annotation [2018-11-14 18:09:02,836 WARN L170 areAnnotationChecker]: L1629-1 has no Hoare annotation [2018-11-14 18:09:02,837 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-14 18:09:02,839 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.11 06:09:02 BoogieIcfgContainer [2018-11-14 18:09:02,840 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-14 18:09:02,841 INFO L168 Benchmark]: Toolchain (without parser) took 78579.98 ms. Allocated memory was 1.5 GB in the beginning and 2.5 GB in the end (delta: 1.0 GB). Free memory was 1.4 GB in the beginning and 1.9 GB in the end (delta: -539.0 MB). Peak memory consumption was 464.5 MB. Max. memory is 7.1 GB. [2018-11-14 18:09:02,844 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-14 18:09:02,844 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1575.62 ms. Allocated memory was 1.5 GB in the beginning and 2.2 GB in the end (delta: 670.6 MB). Free memory was 1.4 GB in the beginning and 2.0 GB in the end (delta: -627.5 MB). Peak memory consumption was 104.5 MB. Max. memory is 7.1 GB. [2018-11-14 18:09:02,845 INFO L168 Benchmark]: Boogie Preprocessor took 240.84 ms. Allocated memory is still 2.2 GB. Free memory is still 2.0 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-14 18:09:02,845 INFO L168 Benchmark]: RCFGBuilder took 5355.02 ms. Allocated memory is still 2.2 GB. Free memory was 2.0 GB in the beginning and 1.8 GB in the end (delta: 181.6 MB). Peak memory consumption was 181.6 MB. Max. memory is 7.1 GB. [2018-11-14 18:09:02,846 INFO L168 Benchmark]: TraceAbstraction took 71404.33 ms. Allocated memory was 2.2 GB in the beginning and 2.5 GB in the end (delta: 332.9 MB). Free memory was 1.8 GB in the beginning and 1.9 GB in the end (delta: -93.1 MB). Peak memory consumption was 239.8 MB. Max. memory is 7.1 GB. [2018-11-14 18:09:02,851 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1575.62 ms. Allocated memory was 1.5 GB in the beginning and 2.2 GB in the end (delta: 670.6 MB). Free memory was 1.4 GB in the beginning and 2.0 GB in the end (delta: -627.5 MB). Peak memory consumption was 104.5 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 240.84 ms. Allocated memory is still 2.2 GB. Free memory is still 2.0 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 5355.02 ms. Allocated memory is still 2.2 GB. Free memory was 2.0 GB in the beginning and 1.8 GB in the end (delta: 181.6 MB). Peak memory consumption was 181.6 MB. Max. memory is 7.1 GB. * TraceAbstraction took 71404.33 ms. Allocated memory was 2.2 GB in the beginning and 2.5 GB in the end (delta: 332.9 MB). Free memory was 1.8 GB in the beginning and 1.9 GB in the end (delta: -93.1 MB). Peak memory consumption was 239.8 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1726]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] FCALL static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={572526641:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] EXPR, FCALL malloc(sizeof(SSL)) [L1070] s = malloc(sizeof(SSL)) [L1071] EXPR, FCALL malloc(sizeof(struct ssl3_state_st)) [L1071] FCALL s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] EXPR, FCALL malloc(sizeof(SSL_CTX)) [L1072] FCALL s->ctx = malloc(sizeof(SSL_CTX)) [L1073] EXPR, FCALL malloc(sizeof(SSL_SESSION)) [L1073] FCALL s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={2113818623:0}, malloc(sizeof(SSL_CTX))={2147373052:0}, malloc(sizeof(SSL_SESSION))={2113818622:0}, malloc(sizeof(struct ssl3_state_st))={2147373055:0}, s={2113818623:0}, SSLv3_server_data={572526641:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={2113818623:0}, SSLv3_server_data={572526641:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] FCALL s->state = 8464 [L1106] blastFlag = 0 [L1107] FCALL s->hit=__VERIFIER_nondet_int () [L1108] FCALL s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR, FCALL s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->info_callback={1:0}, skip=0, SSLv3_server_data={572526641:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR, FCALL s->info_callback [L1116] cb = s->info_callback [L1120] EXPR, FCALL s->in_handshake [L1120] FCALL s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR, FCALL s->cert VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->cert={1:0}, skip=0, SSLv3_server_data={572526641:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={1:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={2113818623:0}, s={2113818623:0}, s->state=8464, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] FCALL s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={1:0}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] FCALL s->state = 8496 [L1337] FCALL s->init_num = 0 VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR, FCALL s->s3 [L1685] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=16, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={1:0}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8496, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] FCALL s->hit VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->hit=0, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] FCALL s->state = 8512 VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] FCALL s->init_num = 0 VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR, FCALL s->s3 [L1685] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=16, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR, FCALL s->state VAL [={1:0}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8512, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR, FCALL s->s3 [L1361] EXPR, FCALL (s->s3)->tmp.new_cipher [L1361] EXPR, FCALL ((s->s3)->tmp.new_cipher)->algorithms VAL [={1:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={2113818623:883}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] FCALL s->state = 8528 [L1377] FCALL s->init_num = 0 VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR, FCALL s->s3 [L1685] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=16, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR, FCALL s->state VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8528, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR, FCALL s->s3 [L1381] EXPR, FCALL (s->s3)->tmp.new_cipher [L1381] EXPR, FCALL ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR, FCALL s->options VAL [={1:0}, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->options=2097152, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR, FCALL s->s3 [L1383] FCALL (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR, FCALL s->s3 [L1387] FCALL (s->s3)->tmp.use_rsa_tmp VAL [={1:0}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] FCALL s->state = 8544 [L1429] FCALL s->init_num = 0 VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR, FCALL s->s3 [L1685] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=16, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR, FCALL s->state VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->state=8544, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR, FCALL s->verify_mode VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->verify_mode=1, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR, FCALL s->session [L1434] EXPR, FCALL (s->session)->peer VAL [={1:0}, (s->session)->peer={0:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->session={2113818622:0}, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR, FCALL s->s3 [L1444] EXPR, FCALL (s->s3)->tmp.new_cipher [L1444] EXPR, FCALL ((s->s3)->tmp.new_cipher)->algorithms VAL [={1:0}, ((s->s3)->tmp.new_cipher)->algorithms=0, (s->s3)->tmp.new_cipher={2113818623:883}, blastFlag=7, got_new_session=1, init=1, l=0, ret=1073741824, s={2113818623:0}, s={2113818623:0}, s->s3={2147373055:0}, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR, FCALL s->s3 [L1454] FCALL (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={1:0}, blastFlag=7, got_new_session=1, init=1, l=0, ret=0, s={2113818623:0}, s={2113818623:0}, skip=0, SSLv3_server_data={572526641:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 188 locations, 1 error locations. UNSAFE Result, 71.2s OverallTime, 7 OverallIterations, 5 TraceHistogramMax, 59.4s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 1990 SDtfs, 1429 SDslu, 1528 SDs, 0 SdLazy, 815 SolverSat, 72 SolverUnsat, 1 SolverUnknown, 0 SolverNotchecked, 4.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 554 GetRequests, 539 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=922occurred in iteration=6, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 2.7s AutomataMinimizationTime, 6 MinimizatonAttempts, 499 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.2s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 3.9s InterpolantComputationTime, 694 NumberOfCodeBlocks, 694 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 550 ConstructedInterpolants, 0 QuantifiedInterpolants, 153421 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1505 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 406/406 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...