java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default-Const.epf -i ../../../trunk/examples/svcomp/loops/s3_false-unreach-call.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-370d6ab [2018-11-14 19:17:19,074 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-14 19:17:19,080 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-14 19:17:19,100 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-14 19:17:19,100 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-14 19:17:19,102 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-14 19:17:19,103 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-14 19:17:19,105 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-14 19:17:19,109 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-14 19:17:19,110 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-14 19:17:19,111 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-14 19:17:19,111 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-14 19:17:19,114 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-14 19:17:19,116 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-14 19:17:19,120 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-14 19:17:19,121 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-14 19:17:19,122 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-14 19:17:19,124 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-14 19:17:19,126 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-14 19:17:19,128 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-14 19:17:19,129 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-14 19:17:19,130 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-14 19:17:19,132 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-14 19:17:19,133 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-14 19:17:19,133 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-14 19:17:19,134 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-14 19:17:19,135 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-14 19:17:19,136 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-14 19:17:19,136 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-14 19:17:19,137 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-14 19:17:19,138 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-14 19:17:19,138 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-14 19:17:19,139 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-14 19:17:19,139 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-14 19:17:19,140 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-14 19:17:19,141 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-14 19:17:19,141 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default-Const.epf [2018-11-14 19:17:19,167 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-14 19:17:19,167 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-14 19:17:19,171 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-14 19:17:19,171 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-14 19:17:19,172 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-14 19:17:19,172 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-14 19:17:19,172 INFO L133 SettingsManager]: * Use SBE=true [2018-11-14 19:17:19,172 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-14 19:17:19,172 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-14 19:17:19,173 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-14 19:17:19,173 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-14 19:17:19,173 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-14 19:17:19,174 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-14 19:17:19,174 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-14 19:17:19,174 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-14 19:17:19,174 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-14 19:17:19,174 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-14 19:17:19,175 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-14 19:17:19,175 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-14 19:17:19,175 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-14 19:17:19,175 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-14 19:17:19,175 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-14 19:17:19,176 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-14 19:17:19,177 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 19:17:19,177 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-14 19:17:19,177 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-14 19:17:19,178 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-14 19:17:19,178 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-14 19:17:19,178 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-14 19:17:19,178 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-14 19:17:19,178 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-14 19:17:19,234 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-14 19:17:19,247 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-14 19:17:19,252 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-14 19:17:19,254 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-14 19:17:19,254 INFO L276 PluginConnector]: CDTParser initialized [2018-11-14 19:17:19,255 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/loops/s3_false-unreach-call.i [2018-11-14 19:17:19,316 INFO L218 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/189956be9/db09fe94f19c48bdbc520460e7cb754e/FLAG8efa67068 [2018-11-14 19:17:19,923 INFO L298 CDTParser]: Found 1 translation units. [2018-11-14 19:17:19,924 INFO L158 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/loops/s3_false-unreach-call.i [2018-11-14 19:17:19,952 INFO L346 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/189956be9/db09fe94f19c48bdbc520460e7cb754e/FLAG8efa67068 [2018-11-14 19:17:19,967 INFO L354 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/189956be9/db09fe94f19c48bdbc520460e7cb754e [2018-11-14 19:17:19,977 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-14 19:17:19,978 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-14 19:17:19,979 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-14 19:17:19,979 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-14 19:17:19,983 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-14 19:17:19,984 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 07:17:19" (1/1) ... [2018-11-14 19:17:19,988 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@224546cb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:19, skipping insertion in model container [2018-11-14 19:17:19,988 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 07:17:19" (1/1) ... [2018-11-14 19:17:19,998 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-14 19:17:20,083 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-14 19:17:20,976 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 19:17:20,995 INFO L191 MainTranslator]: Completed pre-run [2018-11-14 19:17:21,346 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 19:17:21,368 INFO L195 MainTranslator]: Completed translation [2018-11-14 19:17:21,368 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21 WrapperNode [2018-11-14 19:17:21,369 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-14 19:17:21,370 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-14 19:17:21,370 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-14 19:17:21,370 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-14 19:17:21,384 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,384 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,413 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,413 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,534 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,553 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,561 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... [2018-11-14 19:17:21,576 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-14 19:17:21,576 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-14 19:17:21,576 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-14 19:17:21,577 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-14 19:17:21,578 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 19:17:21,661 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-14 19:17:21,662 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-14 19:17:21,662 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_get_client_method [2018-11-14 19:17:21,662 INFO L138 BoogieDeclarations]: Found implementation of procedure SSLv3_client_method [2018-11-14 19:17:21,662 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-14 19:17:21,662 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_connect [2018-11-14 19:17:21,665 INFO L138 BoogieDeclarations]: Found implementation of procedure sslv3_base_method [2018-11-14 19:17:21,665 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-14 19:17:21,665 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-14 19:17:21,665 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-14 19:17:21,666 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-14 19:17:21,666 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-14 19:17:21,666 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-14 19:17:21,666 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-14 19:17:21,666 INFO L130 BoogieDeclarations]: Found specification of procedure SSLv3_client_method [2018-11-14 19:17:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure sslv3_base_method [2018-11-14 19:17:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_connect [2018-11-14 19:17:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_get_client_method [2018-11-14 19:17:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-14 19:17:21,667 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-14 19:17:21,669 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-14 19:17:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-14 19:17:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-14 19:17:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-14 19:17:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-14 19:17:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-14 19:17:21,670 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-14 19:17:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-14 19:17:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-14 19:17:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-14 19:17:21,671 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-14 19:17:22,722 WARN L684 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-14 19:17:22,723 WARN L649 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-14 19:17:25,185 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-14 19:17:25,186 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 07:17:25 BoogieIcfgContainer [2018-11-14 19:17:25,186 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-14 19:17:25,187 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-14 19:17:25,187 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-14 19:17:25,190 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-14 19:17:25,190 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 07:17:19" (1/3) ... [2018-11-14 19:17:25,191 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@560a68e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 07:17:25, skipping insertion in model container [2018-11-14 19:17:25,191 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:17:21" (2/3) ... [2018-11-14 19:17:25,192 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@560a68e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 07:17:25, skipping insertion in model container [2018-11-14 19:17:25,192 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 07:17:25" (3/3) ... [2018-11-14 19:17:25,194 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_false-unreach-call.i [2018-11-14 19:17:25,202 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-14 19:17:25,210 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-14 19:17:25,227 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-14 19:17:25,263 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-14 19:17:25,263 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-14 19:17:25,264 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-14 19:17:25,264 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-14 19:17:25,264 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-14 19:17:25,264 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-14 19:17:25,264 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-14 19:17:25,265 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-14 19:17:25,265 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-14 19:17:25,289 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states. [2018-11-14 19:17:25,298 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-11-14 19:17:25,298 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:25,299 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:25,302 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:25,308 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:25,309 INFO L82 PathProgramCache]: Analyzing trace with hash 996716940, now seen corresponding path program 1 times [2018-11-14 19:17:25,311 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:25,312 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:25,367 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:25,367 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:25,367 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:25,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:25,882 INFO L256 TraceCheckUtils]: 0: Hoare triple {144#true} call ULTIMATE.init(); {144#true} is VALID [2018-11-14 19:17:25,887 INFO L273 TraceCheckUtils]: 1: Hoare triple {144#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {144#true} is VALID [2018-11-14 19:17:25,889 INFO L273 TraceCheckUtils]: 2: Hoare triple {144#true} assume true; {144#true} is VALID [2018-11-14 19:17:25,889 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {144#true} {144#true} #590#return; {144#true} is VALID [2018-11-14 19:17:25,890 INFO L256 TraceCheckUtils]: 4: Hoare triple {144#true} call #t~ret138 := main(); {144#true} is VALID [2018-11-14 19:17:25,890 INFO L273 TraceCheckUtils]: 5: Hoare triple {144#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {144#true} is VALID [2018-11-14 19:17:25,890 INFO L256 TraceCheckUtils]: 6: Hoare triple {144#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {144#true} is VALID [2018-11-14 19:17:25,905 INFO L273 TraceCheckUtils]: 7: Hoare triple {144#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,918 INFO L273 TraceCheckUtils]: 8: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,931 INFO L273 TraceCheckUtils]: 9: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,944 INFO L273 TraceCheckUtils]: 10: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,958 INFO L273 TraceCheckUtils]: 11: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume true; {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,971 INFO L273 TraceCheckUtils]: 12: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !false; {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,984 INFO L273 TraceCheckUtils]: 13: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:25,997 INFO L273 TraceCheckUtils]: 14: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,010 INFO L273 TraceCheckUtils]: 15: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,023 INFO L273 TraceCheckUtils]: 16: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,036 INFO L273 TraceCheckUtils]: 17: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,049 INFO L273 TraceCheckUtils]: 18: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,058 INFO L273 TraceCheckUtils]: 19: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,060 INFO L273 TraceCheckUtils]: 20: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,060 INFO L273 TraceCheckUtils]: 21: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,062 INFO L273 TraceCheckUtils]: 22: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,062 INFO L273 TraceCheckUtils]: 23: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,064 INFO L273 TraceCheckUtils]: 24: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,064 INFO L273 TraceCheckUtils]: 25: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,065 INFO L273 TraceCheckUtils]: 26: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,066 INFO L273 TraceCheckUtils]: 27: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume #t~mem35 == 4432;havoc #t~mem35; {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,067 INFO L273 TraceCheckUtils]: 28: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {146#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:26,069 INFO L273 TraceCheckUtils]: 29: Hoare triple {146#(= 0 ssl3_connect_~blastFlag~0)} assume ~blastFlag~0 == 5; {145#false} is VALID [2018-11-14 19:17:26,070 INFO L273 TraceCheckUtils]: 30: Hoare triple {145#false} assume !false; {145#false} is VALID [2018-11-14 19:17:26,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:17:26,082 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:26,083 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 19:17:26,088 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 31 [2018-11-14 19:17:26,091 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:26,095 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 19:17:26,205 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:26,206 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 19:17:26,214 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 19:17:26,215 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:17:26,218 INFO L87 Difference]: Start difference. First operand 141 states. Second operand 3 states. [2018-11-14 19:17:27,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:27,621 INFO L93 Difference]: Finished difference Result 388 states and 640 transitions. [2018-11-14 19:17:27,621 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 19:17:27,621 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 31 [2018-11-14 19:17:27,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:27,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:17:27,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 640 transitions. [2018-11-14 19:17:27,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:17:27,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 640 transitions. [2018-11-14 19:17:27,660 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 640 transitions. [2018-11-14 19:17:28,768 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 640 edges. 640 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:28,796 INFO L225 Difference]: With dead ends: 388 [2018-11-14 19:17:28,796 INFO L226 Difference]: Without dead ends: 225 [2018-11-14 19:17:28,801 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:17:28,822 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2018-11-14 19:17:28,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 225. [2018-11-14 19:17:28,988 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:28,989 INFO L82 GeneralOperation]: Start isEquivalent. First operand 225 states. Second operand 225 states. [2018-11-14 19:17:28,989 INFO L74 IsIncluded]: Start isIncluded. First operand 225 states. Second operand 225 states. [2018-11-14 19:17:28,990 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 225 states. [2018-11-14 19:17:29,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:29,003 INFO L93 Difference]: Finished difference Result 225 states and 329 transitions. [2018-11-14 19:17:29,004 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 329 transitions. [2018-11-14 19:17:29,006 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:29,007 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:29,007 INFO L74 IsIncluded]: Start isIncluded. First operand 225 states. Second operand 225 states. [2018-11-14 19:17:29,007 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 225 states. [2018-11-14 19:17:29,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:29,020 INFO L93 Difference]: Finished difference Result 225 states and 329 transitions. [2018-11-14 19:17:29,020 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 329 transitions. [2018-11-14 19:17:29,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:29,023 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:29,023 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:29,024 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:29,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 225 states. [2018-11-14 19:17:29,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 329 transitions. [2018-11-14 19:17:29,036 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 329 transitions. Word has length 31 [2018-11-14 19:17:29,037 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:29,037 INFO L480 AbstractCegarLoop]: Abstraction has 225 states and 329 transitions. [2018-11-14 19:17:29,037 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 19:17:29,037 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 329 transitions. [2018-11-14 19:17:29,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-14 19:17:29,039 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:29,040 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:29,040 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:29,040 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:29,041 INFO L82 PathProgramCache]: Analyzing trace with hash 1957476544, now seen corresponding path program 1 times [2018-11-14 19:17:29,041 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:29,041 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:29,043 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:29,043 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:29,043 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:29,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:29,215 INFO L256 TraceCheckUtils]: 0: Hoare triple {1316#true} call ULTIMATE.init(); {1316#true} is VALID [2018-11-14 19:17:29,215 INFO L273 TraceCheckUtils]: 1: Hoare triple {1316#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {1316#true} is VALID [2018-11-14 19:17:29,216 INFO L273 TraceCheckUtils]: 2: Hoare triple {1316#true} assume true; {1316#true} is VALID [2018-11-14 19:17:29,216 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1316#true} {1316#true} #590#return; {1316#true} is VALID [2018-11-14 19:17:29,216 INFO L256 TraceCheckUtils]: 4: Hoare triple {1316#true} call #t~ret138 := main(); {1316#true} is VALID [2018-11-14 19:17:29,217 INFO L273 TraceCheckUtils]: 5: Hoare triple {1316#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {1316#true} is VALID [2018-11-14 19:17:29,217 INFO L256 TraceCheckUtils]: 6: Hoare triple {1316#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {1316#true} is VALID [2018-11-14 19:17:29,217 INFO L273 TraceCheckUtils]: 7: Hoare triple {1316#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {1316#true} is VALID [2018-11-14 19:17:29,218 INFO L273 TraceCheckUtils]: 8: Hoare triple {1316#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {1316#true} is VALID [2018-11-14 19:17:29,218 INFO L273 TraceCheckUtils]: 9: Hoare triple {1316#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {1316#true} is VALID [2018-11-14 19:17:29,219 INFO L273 TraceCheckUtils]: 10: Hoare triple {1316#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {1316#true} is VALID [2018-11-14 19:17:29,219 INFO L273 TraceCheckUtils]: 11: Hoare triple {1316#true} assume true; {1316#true} is VALID [2018-11-14 19:17:29,219 INFO L273 TraceCheckUtils]: 12: Hoare triple {1316#true} assume !false; {1316#true} is VALID [2018-11-14 19:17:29,219 INFO L273 TraceCheckUtils]: 13: Hoare triple {1316#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {1316#true} is VALID [2018-11-14 19:17:29,220 INFO L273 TraceCheckUtils]: 14: Hoare triple {1316#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {1316#true} is VALID [2018-11-14 19:17:29,220 INFO L273 TraceCheckUtils]: 15: Hoare triple {1316#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {1316#true} is VALID [2018-11-14 19:17:29,220 INFO L273 TraceCheckUtils]: 16: Hoare triple {1316#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {1316#true} is VALID [2018-11-14 19:17:29,220 INFO L273 TraceCheckUtils]: 17: Hoare triple {1316#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {1316#true} is VALID [2018-11-14 19:17:29,221 INFO L273 TraceCheckUtils]: 18: Hoare triple {1316#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {1316#true} is VALID [2018-11-14 19:17:29,221 INFO L273 TraceCheckUtils]: 19: Hoare triple {1316#true} assume #t~mem27 == 4368;havoc #t~mem27; {1316#true} is VALID [2018-11-14 19:17:29,221 INFO L273 TraceCheckUtils]: 20: Hoare triple {1316#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {1316#true} is VALID [2018-11-14 19:17:29,226 INFO L273 TraceCheckUtils]: 21: Hoare triple {1316#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,227 INFO L273 TraceCheckUtils]: 22: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,228 INFO L273 TraceCheckUtils]: 23: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,230 INFO L273 TraceCheckUtils]: 24: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,230 INFO L273 TraceCheckUtils]: 25: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,232 INFO L273 TraceCheckUtils]: 26: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} ~skip~0 := 0; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,232 INFO L273 TraceCheckUtils]: 27: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume true; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,234 INFO L273 TraceCheckUtils]: 28: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !false; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,234 INFO L273 TraceCheckUtils]: 29: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,237 INFO L273 TraceCheckUtils]: 30: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,240 INFO L273 TraceCheckUtils]: 31: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,241 INFO L273 TraceCheckUtils]: 32: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,241 INFO L273 TraceCheckUtils]: 33: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,242 INFO L273 TraceCheckUtils]: 34: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,242 INFO L273 TraceCheckUtils]: 35: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,242 INFO L273 TraceCheckUtils]: 36: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,243 INFO L273 TraceCheckUtils]: 37: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,243 INFO L273 TraceCheckUtils]: 38: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,244 INFO L273 TraceCheckUtils]: 39: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,244 INFO L273 TraceCheckUtils]: 40: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,245 INFO L273 TraceCheckUtils]: 41: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,245 INFO L273 TraceCheckUtils]: 42: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,247 INFO L273 TraceCheckUtils]: 43: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume #t~mem35 == 4432;havoc #t~mem35; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,249 INFO L273 TraceCheckUtils]: 44: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {1318#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-14 19:17:29,249 INFO L273 TraceCheckUtils]: 45: Hoare triple {1318#(= 1 ssl3_connect_~blastFlag~0)} assume ~blastFlag~0 == 5; {1317#false} is VALID [2018-11-14 19:17:29,250 INFO L273 TraceCheckUtils]: 46: Hoare triple {1317#false} assume !false; {1317#false} is VALID [2018-11-14 19:17:29,255 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:17:29,255 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:29,255 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 19:17:29,257 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2018-11-14 19:17:29,258 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:29,258 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 19:17:29,359 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:29,360 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 19:17:29,360 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 19:17:29,360 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:17:29,361 INFO L87 Difference]: Start difference. First operand 225 states and 329 transitions. Second operand 3 states. [2018-11-14 19:17:30,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:30,729 INFO L93 Difference]: Finished difference Result 436 states and 646 transitions. [2018-11-14 19:17:30,730 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 19:17:30,730 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2018-11-14 19:17:30,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:30,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:17:30,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 495 transitions. [2018-11-14 19:17:30,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:17:30,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 495 transitions. [2018-11-14 19:17:30,744 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 495 transitions. [2018-11-14 19:17:31,767 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 495 edges. 495 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:31,779 INFO L225 Difference]: With dead ends: 436 [2018-11-14 19:17:31,780 INFO L226 Difference]: Without dead ends: 328 [2018-11-14 19:17:31,781 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:17:31,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 328 states. [2018-11-14 19:17:31,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 328 to 328. [2018-11-14 19:17:31,895 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:31,895 INFO L82 GeneralOperation]: Start isEquivalent. First operand 328 states. Second operand 328 states. [2018-11-14 19:17:31,895 INFO L74 IsIncluded]: Start isIncluded. First operand 328 states. Second operand 328 states. [2018-11-14 19:17:31,895 INFO L87 Difference]: Start difference. First operand 328 states. Second operand 328 states. [2018-11-14 19:17:31,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:31,910 INFO L93 Difference]: Finished difference Result 328 states and 479 transitions. [2018-11-14 19:17:31,911 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 479 transitions. [2018-11-14 19:17:31,912 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:31,912 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:31,912 INFO L74 IsIncluded]: Start isIncluded. First operand 328 states. Second operand 328 states. [2018-11-14 19:17:31,912 INFO L87 Difference]: Start difference. First operand 328 states. Second operand 328 states. [2018-11-14 19:17:31,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:31,927 INFO L93 Difference]: Finished difference Result 328 states and 479 transitions. [2018-11-14 19:17:31,927 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 479 transitions. [2018-11-14 19:17:31,928 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:31,928 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:31,928 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:31,928 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:31,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 328 states. [2018-11-14 19:17:31,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 328 states to 328 states and 479 transitions. [2018-11-14 19:17:31,943 INFO L78 Accepts]: Start accepts. Automaton has 328 states and 479 transitions. Word has length 47 [2018-11-14 19:17:31,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:31,943 INFO L480 AbstractCegarLoop]: Abstraction has 328 states and 479 transitions. [2018-11-14 19:17:31,943 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 19:17:31,944 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 479 transitions. [2018-11-14 19:17:31,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-14 19:17:31,946 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:31,946 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:31,946 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:31,946 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:31,949 INFO L82 PathProgramCache]: Analyzing trace with hash 1904950175, now seen corresponding path program 1 times [2018-11-14 19:17:31,949 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:31,949 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:31,951 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:31,951 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:31,951 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:32,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:32,233 INFO L256 TraceCheckUtils]: 0: Hoare triple {2868#true} call ULTIMATE.init(); {2868#true} is VALID [2018-11-14 19:17:32,233 INFO L273 TraceCheckUtils]: 1: Hoare triple {2868#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {2868#true} is VALID [2018-11-14 19:17:32,233 INFO L273 TraceCheckUtils]: 2: Hoare triple {2868#true} assume true; {2868#true} is VALID [2018-11-14 19:17:32,234 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2868#true} {2868#true} #590#return; {2868#true} is VALID [2018-11-14 19:17:32,234 INFO L256 TraceCheckUtils]: 4: Hoare triple {2868#true} call #t~ret138 := main(); {2868#true} is VALID [2018-11-14 19:17:32,234 INFO L273 TraceCheckUtils]: 5: Hoare triple {2868#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {2868#true} is VALID [2018-11-14 19:17:32,234 INFO L256 TraceCheckUtils]: 6: Hoare triple {2868#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {2868#true} is VALID [2018-11-14 19:17:32,234 INFO L273 TraceCheckUtils]: 7: Hoare triple {2868#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {2868#true} is VALID [2018-11-14 19:17:32,235 INFO L273 TraceCheckUtils]: 8: Hoare triple {2868#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {2868#true} is VALID [2018-11-14 19:17:32,235 INFO L273 TraceCheckUtils]: 9: Hoare triple {2868#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {2868#true} is VALID [2018-11-14 19:17:32,235 INFO L273 TraceCheckUtils]: 10: Hoare triple {2868#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {2868#true} is VALID [2018-11-14 19:17:32,235 INFO L273 TraceCheckUtils]: 11: Hoare triple {2868#true} assume true; {2868#true} is VALID [2018-11-14 19:17:32,236 INFO L273 TraceCheckUtils]: 12: Hoare triple {2868#true} assume !false; {2868#true} is VALID [2018-11-14 19:17:32,236 INFO L273 TraceCheckUtils]: 13: Hoare triple {2868#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,236 INFO L273 TraceCheckUtils]: 14: Hoare triple {2868#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,236 INFO L273 TraceCheckUtils]: 15: Hoare triple {2868#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,237 INFO L273 TraceCheckUtils]: 16: Hoare triple {2868#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,237 INFO L273 TraceCheckUtils]: 17: Hoare triple {2868#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,237 INFO L273 TraceCheckUtils]: 18: Hoare triple {2868#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,237 INFO L273 TraceCheckUtils]: 19: Hoare triple {2868#true} assume #t~mem27 == 4368;havoc #t~mem27; {2868#true} is VALID [2018-11-14 19:17:32,237 INFO L273 TraceCheckUtils]: 20: Hoare triple {2868#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {2868#true} is VALID [2018-11-14 19:17:32,237 INFO L273 TraceCheckUtils]: 21: Hoare triple {2868#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {2868#true} is VALID [2018-11-14 19:17:32,238 INFO L273 TraceCheckUtils]: 22: Hoare triple {2868#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {2868#true} is VALID [2018-11-14 19:17:32,238 INFO L273 TraceCheckUtils]: 23: Hoare triple {2868#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {2868#true} is VALID [2018-11-14 19:17:32,238 INFO L273 TraceCheckUtils]: 24: Hoare triple {2868#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {2868#true} is VALID [2018-11-14 19:17:32,238 INFO L273 TraceCheckUtils]: 25: Hoare triple {2868#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {2868#true} is VALID [2018-11-14 19:17:32,239 INFO L273 TraceCheckUtils]: 26: Hoare triple {2868#true} ~skip~0 := 0; {2868#true} is VALID [2018-11-14 19:17:32,239 INFO L273 TraceCheckUtils]: 27: Hoare triple {2868#true} assume true; {2868#true} is VALID [2018-11-14 19:17:32,239 INFO L273 TraceCheckUtils]: 28: Hoare triple {2868#true} assume !false; {2868#true} is VALID [2018-11-14 19:17:32,239 INFO L273 TraceCheckUtils]: 29: Hoare triple {2868#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,239 INFO L273 TraceCheckUtils]: 30: Hoare triple {2868#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,240 INFO L273 TraceCheckUtils]: 31: Hoare triple {2868#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,240 INFO L273 TraceCheckUtils]: 32: Hoare triple {2868#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,240 INFO L273 TraceCheckUtils]: 33: Hoare triple {2868#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,240 INFO L273 TraceCheckUtils]: 34: Hoare triple {2868#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,241 INFO L273 TraceCheckUtils]: 35: Hoare triple {2868#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,241 INFO L273 TraceCheckUtils]: 36: Hoare triple {2868#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {2868#true} is VALID [2018-11-14 19:17:32,241 INFO L273 TraceCheckUtils]: 37: Hoare triple {2868#true} assume #t~mem29 == 4384;havoc #t~mem29; {2868#true} is VALID [2018-11-14 19:17:32,242 INFO L273 TraceCheckUtils]: 38: Hoare triple {2868#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {2868#true} is VALID [2018-11-14 19:17:32,242 INFO L273 TraceCheckUtils]: 39: Hoare triple {2868#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {2868#true} is VALID [2018-11-14 19:17:32,242 INFO L273 TraceCheckUtils]: 40: Hoare triple {2868#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {2868#true} is VALID [2018-11-14 19:17:32,245 INFO L273 TraceCheckUtils]: 41: Hoare triple {2868#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,246 INFO L273 TraceCheckUtils]: 42: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, ~s.offset + 64, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,260 INFO L273 TraceCheckUtils]: 43: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,261 INFO L273 TraceCheckUtils]: 44: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,265 INFO L273 TraceCheckUtils]: 45: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,265 INFO L273 TraceCheckUtils]: 46: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume true; {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,267 INFO L273 TraceCheckUtils]: 47: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,267 INFO L273 TraceCheckUtils]: 48: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,270 INFO L273 TraceCheckUtils]: 49: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,274 INFO L273 TraceCheckUtils]: 50: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,274 INFO L273 TraceCheckUtils]: 51: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,276 INFO L273 TraceCheckUtils]: 52: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,278 INFO L273 TraceCheckUtils]: 53: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,280 INFO L273 TraceCheckUtils]: 54: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,280 INFO L273 TraceCheckUtils]: 55: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,282 INFO L273 TraceCheckUtils]: 56: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,282 INFO L273 TraceCheckUtils]: 57: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,284 INFO L273 TraceCheckUtils]: 58: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,284 INFO L273 TraceCheckUtils]: 59: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,285 INFO L273 TraceCheckUtils]: 60: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:32,285 INFO L273 TraceCheckUtils]: 61: Hoare triple {2870#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {2871#(= 4560 |ssl3_connect_#t~mem35|)} is VALID [2018-11-14 19:17:32,286 INFO L273 TraceCheckUtils]: 62: Hoare triple {2871#(= 4560 |ssl3_connect_#t~mem35|)} assume #t~mem35 == 4432;havoc #t~mem35; {2869#false} is VALID [2018-11-14 19:17:32,286 INFO L273 TraceCheckUtils]: 63: Hoare triple {2869#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {2869#false} is VALID [2018-11-14 19:17:32,286 INFO L273 TraceCheckUtils]: 64: Hoare triple {2869#false} assume ~blastFlag~0 == 5; {2869#false} is VALID [2018-11-14 19:17:32,286 INFO L273 TraceCheckUtils]: 65: Hoare triple {2869#false} assume !false; {2869#false} is VALID [2018-11-14 19:17:32,299 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:17:32,299 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:32,299 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:17:32,300 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-14 19:17:32,300 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:32,300 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:17:32,400 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:32,400 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:17:32,401 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:17:32,401 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:17:32,401 INFO L87 Difference]: Start difference. First operand 328 states and 479 transitions. Second operand 4 states. [2018-11-14 19:17:35,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:35,522 INFO L93 Difference]: Finished difference Result 833 states and 1224 transitions. [2018-11-14 19:17:35,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:17:35,522 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-14 19:17:35,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:35,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:35,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 484 transitions. [2018-11-14 19:17:35,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:35,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 484 transitions. [2018-11-14 19:17:35,535 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 484 transitions. [2018-11-14 19:17:36,152 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 484 edges. 484 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:36,188 INFO L225 Difference]: With dead ends: 833 [2018-11-14 19:17:36,188 INFO L226 Difference]: Without dead ends: 518 [2018-11-14 19:17:36,190 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:17:36,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 518 states. [2018-11-14 19:17:36,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 518 to 380. [2018-11-14 19:17:36,623 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:36,623 INFO L82 GeneralOperation]: Start isEquivalent. First operand 518 states. Second operand 380 states. [2018-11-14 19:17:36,623 INFO L74 IsIncluded]: Start isIncluded. First operand 518 states. Second operand 380 states. [2018-11-14 19:17:36,623 INFO L87 Difference]: Start difference. First operand 518 states. Second operand 380 states. [2018-11-14 19:17:36,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:36,645 INFO L93 Difference]: Finished difference Result 518 states and 760 transitions. [2018-11-14 19:17:36,645 INFO L276 IsEmpty]: Start isEmpty. Operand 518 states and 760 transitions. [2018-11-14 19:17:36,647 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:36,647 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:36,647 INFO L74 IsIncluded]: Start isIncluded. First operand 380 states. Second operand 518 states. [2018-11-14 19:17:36,647 INFO L87 Difference]: Start difference. First operand 380 states. Second operand 518 states. [2018-11-14 19:17:36,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:36,669 INFO L93 Difference]: Finished difference Result 518 states and 760 transitions. [2018-11-14 19:17:36,669 INFO L276 IsEmpty]: Start isEmpty. Operand 518 states and 760 transitions. [2018-11-14 19:17:36,671 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:36,671 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:36,671 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:36,671 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:36,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 380 states. [2018-11-14 19:17:36,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 380 states to 380 states and 567 transitions. [2018-11-14 19:17:36,685 INFO L78 Accepts]: Start accepts. Automaton has 380 states and 567 transitions. Word has length 66 [2018-11-14 19:17:36,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:36,685 INFO L480 AbstractCegarLoop]: Abstraction has 380 states and 567 transitions. [2018-11-14 19:17:36,685 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:17:36,685 INFO L276 IsEmpty]: Start isEmpty. Operand 380 states and 567 transitions. [2018-11-14 19:17:36,687 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-14 19:17:36,687 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:36,687 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:36,687 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:36,688 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:36,688 INFO L82 PathProgramCache]: Analyzing trace with hash 2045498785, now seen corresponding path program 1 times [2018-11-14 19:17:36,688 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:36,688 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:36,694 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:36,694 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:36,695 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:36,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:36,974 INFO L256 TraceCheckUtils]: 0: Hoare triple {5319#true} call ULTIMATE.init(); {5319#true} is VALID [2018-11-14 19:17:36,975 INFO L273 TraceCheckUtils]: 1: Hoare triple {5319#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {5319#true} is VALID [2018-11-14 19:17:36,975 INFO L273 TraceCheckUtils]: 2: Hoare triple {5319#true} assume true; {5319#true} is VALID [2018-11-14 19:17:36,975 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5319#true} {5319#true} #590#return; {5319#true} is VALID [2018-11-14 19:17:36,976 INFO L256 TraceCheckUtils]: 4: Hoare triple {5319#true} call #t~ret138 := main(); {5319#true} is VALID [2018-11-14 19:17:36,976 INFO L273 TraceCheckUtils]: 5: Hoare triple {5319#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {5319#true} is VALID [2018-11-14 19:17:36,976 INFO L256 TraceCheckUtils]: 6: Hoare triple {5319#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {5319#true} is VALID [2018-11-14 19:17:36,977 INFO L273 TraceCheckUtils]: 7: Hoare triple {5319#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {5319#true} is VALID [2018-11-14 19:17:36,977 INFO L273 TraceCheckUtils]: 8: Hoare triple {5319#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {5319#true} is VALID [2018-11-14 19:17:36,977 INFO L273 TraceCheckUtils]: 9: Hoare triple {5319#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {5319#true} is VALID [2018-11-14 19:17:36,977 INFO L273 TraceCheckUtils]: 10: Hoare triple {5319#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {5319#true} is VALID [2018-11-14 19:17:36,977 INFO L273 TraceCheckUtils]: 11: Hoare triple {5319#true} assume true; {5319#true} is VALID [2018-11-14 19:17:36,978 INFO L273 TraceCheckUtils]: 12: Hoare triple {5319#true} assume !false; {5319#true} is VALID [2018-11-14 19:17:36,978 INFO L273 TraceCheckUtils]: 13: Hoare triple {5319#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,978 INFO L273 TraceCheckUtils]: 14: Hoare triple {5319#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,978 INFO L273 TraceCheckUtils]: 15: Hoare triple {5319#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,978 INFO L273 TraceCheckUtils]: 16: Hoare triple {5319#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,978 INFO L273 TraceCheckUtils]: 17: Hoare triple {5319#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,979 INFO L273 TraceCheckUtils]: 18: Hoare triple {5319#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,979 INFO L273 TraceCheckUtils]: 19: Hoare triple {5319#true} assume #t~mem27 == 4368;havoc #t~mem27; {5319#true} is VALID [2018-11-14 19:17:36,979 INFO L273 TraceCheckUtils]: 20: Hoare triple {5319#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {5319#true} is VALID [2018-11-14 19:17:36,979 INFO L273 TraceCheckUtils]: 21: Hoare triple {5319#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {5319#true} is VALID [2018-11-14 19:17:36,979 INFO L273 TraceCheckUtils]: 22: Hoare triple {5319#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {5319#true} is VALID [2018-11-14 19:17:36,979 INFO L273 TraceCheckUtils]: 23: Hoare triple {5319#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {5319#true} is VALID [2018-11-14 19:17:36,980 INFO L273 TraceCheckUtils]: 24: Hoare triple {5319#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {5319#true} is VALID [2018-11-14 19:17:36,980 INFO L273 TraceCheckUtils]: 25: Hoare triple {5319#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {5319#true} is VALID [2018-11-14 19:17:36,980 INFO L273 TraceCheckUtils]: 26: Hoare triple {5319#true} ~skip~0 := 0; {5319#true} is VALID [2018-11-14 19:17:36,980 INFO L273 TraceCheckUtils]: 27: Hoare triple {5319#true} assume true; {5319#true} is VALID [2018-11-14 19:17:36,980 INFO L273 TraceCheckUtils]: 28: Hoare triple {5319#true} assume !false; {5319#true} is VALID [2018-11-14 19:17:36,980 INFO L273 TraceCheckUtils]: 29: Hoare triple {5319#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,981 INFO L273 TraceCheckUtils]: 30: Hoare triple {5319#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,981 INFO L273 TraceCheckUtils]: 31: Hoare triple {5319#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,981 INFO L273 TraceCheckUtils]: 32: Hoare triple {5319#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,981 INFO L273 TraceCheckUtils]: 33: Hoare triple {5319#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,981 INFO L273 TraceCheckUtils]: 34: Hoare triple {5319#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,982 INFO L273 TraceCheckUtils]: 35: Hoare triple {5319#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,982 INFO L273 TraceCheckUtils]: 36: Hoare triple {5319#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {5319#true} is VALID [2018-11-14 19:17:36,982 INFO L273 TraceCheckUtils]: 37: Hoare triple {5319#true} assume #t~mem29 == 4384;havoc #t~mem29; {5319#true} is VALID [2018-11-14 19:17:36,982 INFO L273 TraceCheckUtils]: 38: Hoare triple {5319#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {5319#true} is VALID [2018-11-14 19:17:36,982 INFO L273 TraceCheckUtils]: 39: Hoare triple {5319#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {5319#true} is VALID [2018-11-14 19:17:36,983 INFO L273 TraceCheckUtils]: 40: Hoare triple {5319#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {5319#true} is VALID [2018-11-14 19:17:36,983 INFO L273 TraceCheckUtils]: 41: Hoare triple {5319#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,984 INFO L273 TraceCheckUtils]: 42: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, ~s.offset + 64, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,985 INFO L273 TraceCheckUtils]: 43: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,985 INFO L273 TraceCheckUtils]: 44: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,985 INFO L273 TraceCheckUtils]: 45: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,986 INFO L273 TraceCheckUtils]: 46: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume true; {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,986 INFO L273 TraceCheckUtils]: 47: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,987 INFO L273 TraceCheckUtils]: 48: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,988 INFO L273 TraceCheckUtils]: 49: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,988 INFO L273 TraceCheckUtils]: 50: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,989 INFO L273 TraceCheckUtils]: 51: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,989 INFO L273 TraceCheckUtils]: 52: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,990 INFO L273 TraceCheckUtils]: 53: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,991 INFO L273 TraceCheckUtils]: 54: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,991 INFO L273 TraceCheckUtils]: 55: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,992 INFO L273 TraceCheckUtils]: 56: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:36,993 INFO L273 TraceCheckUtils]: 57: Hoare triple {5321#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {5322#(= |ssl3_connect_#t~mem31| 4400)} is VALID [2018-11-14 19:17:36,994 INFO L273 TraceCheckUtils]: 58: Hoare triple {5322#(= |ssl3_connect_#t~mem31| 4400)} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {5320#false} is VALID [2018-11-14 19:17:36,994 INFO L273 TraceCheckUtils]: 59: Hoare triple {5320#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {5320#false} is VALID [2018-11-14 19:17:36,994 INFO L273 TraceCheckUtils]: 60: Hoare triple {5320#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {5320#false} is VALID [2018-11-14 19:17:36,995 INFO L273 TraceCheckUtils]: 61: Hoare triple {5320#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {5320#false} is VALID [2018-11-14 19:17:36,995 INFO L273 TraceCheckUtils]: 62: Hoare triple {5320#false} assume #t~mem35 == 4432;havoc #t~mem35; {5320#false} is VALID [2018-11-14 19:17:36,995 INFO L273 TraceCheckUtils]: 63: Hoare triple {5320#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {5320#false} is VALID [2018-11-14 19:17:36,996 INFO L273 TraceCheckUtils]: 64: Hoare triple {5320#false} assume ~blastFlag~0 == 5; {5320#false} is VALID [2018-11-14 19:17:36,996 INFO L273 TraceCheckUtils]: 65: Hoare triple {5320#false} assume !false; {5320#false} is VALID [2018-11-14 19:17:37,003 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:17:37,004 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:37,004 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:17:37,004 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-14 19:17:37,005 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:37,005 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:17:37,102 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:37,102 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:17:37,103 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:17:37,103 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:17:37,103 INFO L87 Difference]: Start difference. First operand 380 states and 567 transitions. Second operand 4 states. [2018-11-14 19:17:40,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:40,175 INFO L93 Difference]: Finished difference Result 833 states and 1244 transitions. [2018-11-14 19:17:40,175 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:17:40,176 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-14 19:17:40,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:40,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:40,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 405 transitions. [2018-11-14 19:17:40,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:40,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 405 transitions. [2018-11-14 19:17:40,184 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 405 transitions. [2018-11-14 19:17:41,240 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 405 edges. 405 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:41,260 INFO L225 Difference]: With dead ends: 833 [2018-11-14 19:17:41,260 INFO L226 Difference]: Without dead ends: 466 [2018-11-14 19:17:41,261 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:17:41,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 466 states. [2018-11-14 19:17:41,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 466 to 422. [2018-11-14 19:17:41,494 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:41,495 INFO L82 GeneralOperation]: Start isEquivalent. First operand 466 states. Second operand 422 states. [2018-11-14 19:17:41,495 INFO L74 IsIncluded]: Start isIncluded. First operand 466 states. Second operand 422 states. [2018-11-14 19:17:41,495 INFO L87 Difference]: Start difference. First operand 466 states. Second operand 422 states. [2018-11-14 19:17:41,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:41,513 INFO L93 Difference]: Finished difference Result 466 states and 692 transitions. [2018-11-14 19:17:41,513 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 692 transitions. [2018-11-14 19:17:41,514 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:41,515 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:41,515 INFO L74 IsIncluded]: Start isIncluded. First operand 422 states. Second operand 466 states. [2018-11-14 19:17:41,515 INFO L87 Difference]: Start difference. First operand 422 states. Second operand 466 states. [2018-11-14 19:17:41,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:41,533 INFO L93 Difference]: Finished difference Result 466 states and 692 transitions. [2018-11-14 19:17:41,534 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 692 transitions. [2018-11-14 19:17:41,535 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:41,535 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:41,535 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:41,536 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:41,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 422 states. [2018-11-14 19:17:41,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 637 transitions. [2018-11-14 19:17:41,552 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 637 transitions. Word has length 66 [2018-11-14 19:17:41,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:41,552 INFO L480 AbstractCegarLoop]: Abstraction has 422 states and 637 transitions. [2018-11-14 19:17:41,553 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:17:41,553 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 637 transitions. [2018-11-14 19:17:41,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-14 19:17:41,555 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:41,555 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:41,555 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:41,555 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:41,556 INFO L82 PathProgramCache]: Analyzing trace with hash -1080504593, now seen corresponding path program 1 times [2018-11-14 19:17:41,556 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:41,556 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:41,558 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:41,558 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:41,558 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:41,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:41,885 WARN L179 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-14 19:17:42,242 INFO L256 TraceCheckUtils]: 0: Hoare triple {7693#true} call ULTIMATE.init(); {7693#true} is VALID [2018-11-14 19:17:42,243 INFO L273 TraceCheckUtils]: 1: Hoare triple {7693#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {7693#true} is VALID [2018-11-14 19:17:42,243 INFO L273 TraceCheckUtils]: 2: Hoare triple {7693#true} assume true; {7693#true} is VALID [2018-11-14 19:17:42,243 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7693#true} {7693#true} #590#return; {7693#true} is VALID [2018-11-14 19:17:42,244 INFO L256 TraceCheckUtils]: 4: Hoare triple {7693#true} call #t~ret138 := main(); {7693#true} is VALID [2018-11-14 19:17:42,244 INFO L273 TraceCheckUtils]: 5: Hoare triple {7693#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {7693#true} is VALID [2018-11-14 19:17:42,244 INFO L256 TraceCheckUtils]: 6: Hoare triple {7693#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {7693#true} is VALID [2018-11-14 19:17:42,244 INFO L273 TraceCheckUtils]: 7: Hoare triple {7693#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {7693#true} is VALID [2018-11-14 19:17:42,245 INFO L273 TraceCheckUtils]: 8: Hoare triple {7693#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {7693#true} is VALID [2018-11-14 19:17:42,245 INFO L273 TraceCheckUtils]: 9: Hoare triple {7693#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {7693#true} is VALID [2018-11-14 19:17:42,245 INFO L273 TraceCheckUtils]: 10: Hoare triple {7693#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {7693#true} is VALID [2018-11-14 19:17:42,245 INFO L273 TraceCheckUtils]: 11: Hoare triple {7693#true} assume true; {7693#true} is VALID [2018-11-14 19:17:42,246 INFO L273 TraceCheckUtils]: 12: Hoare triple {7693#true} assume !false; {7693#true} is VALID [2018-11-14 19:17:42,246 INFO L273 TraceCheckUtils]: 13: Hoare triple {7693#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,246 INFO L273 TraceCheckUtils]: 14: Hoare triple {7693#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,246 INFO L273 TraceCheckUtils]: 15: Hoare triple {7693#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,247 INFO L273 TraceCheckUtils]: 16: Hoare triple {7693#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,247 INFO L273 TraceCheckUtils]: 17: Hoare triple {7693#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,247 INFO L273 TraceCheckUtils]: 18: Hoare triple {7693#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,247 INFO L273 TraceCheckUtils]: 19: Hoare triple {7693#true} assume #t~mem27 == 4368;havoc #t~mem27; {7693#true} is VALID [2018-11-14 19:17:42,248 INFO L273 TraceCheckUtils]: 20: Hoare triple {7693#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {7693#true} is VALID [2018-11-14 19:17:42,248 INFO L273 TraceCheckUtils]: 21: Hoare triple {7693#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {7693#true} is VALID [2018-11-14 19:17:42,248 INFO L273 TraceCheckUtils]: 22: Hoare triple {7693#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {7693#true} is VALID [2018-11-14 19:17:42,248 INFO L273 TraceCheckUtils]: 23: Hoare triple {7693#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {7693#true} is VALID [2018-11-14 19:17:42,250 INFO L273 TraceCheckUtils]: 24: Hoare triple {7693#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {7693#true} is VALID [2018-11-14 19:17:42,250 INFO L273 TraceCheckUtils]: 25: Hoare triple {7693#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {7693#true} is VALID [2018-11-14 19:17:42,250 INFO L273 TraceCheckUtils]: 26: Hoare triple {7693#true} ~skip~0 := 0; {7693#true} is VALID [2018-11-14 19:17:42,251 INFO L273 TraceCheckUtils]: 27: Hoare triple {7693#true} assume true; {7693#true} is VALID [2018-11-14 19:17:42,251 INFO L273 TraceCheckUtils]: 28: Hoare triple {7693#true} assume !false; {7693#true} is VALID [2018-11-14 19:17:42,251 INFO L273 TraceCheckUtils]: 29: Hoare triple {7693#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,252 INFO L273 TraceCheckUtils]: 30: Hoare triple {7693#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,253 INFO L273 TraceCheckUtils]: 31: Hoare triple {7693#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,253 INFO L273 TraceCheckUtils]: 32: Hoare triple {7693#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,253 INFO L273 TraceCheckUtils]: 33: Hoare triple {7693#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,254 INFO L273 TraceCheckUtils]: 34: Hoare triple {7693#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,254 INFO L273 TraceCheckUtils]: 35: Hoare triple {7693#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,254 INFO L273 TraceCheckUtils]: 36: Hoare triple {7693#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {7693#true} is VALID [2018-11-14 19:17:42,254 INFO L273 TraceCheckUtils]: 37: Hoare triple {7693#true} assume #t~mem29 == 4384;havoc #t~mem29; {7693#true} is VALID [2018-11-14 19:17:42,255 INFO L273 TraceCheckUtils]: 38: Hoare triple {7693#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {7693#true} is VALID [2018-11-14 19:17:42,255 INFO L273 TraceCheckUtils]: 39: Hoare triple {7693#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {7693#true} is VALID [2018-11-14 19:17:42,255 INFO L273 TraceCheckUtils]: 40: Hoare triple {7693#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {7693#true} is VALID [2018-11-14 19:17:42,275 INFO L273 TraceCheckUtils]: 41: Hoare triple {7693#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,282 INFO L273 TraceCheckUtils]: 42: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, ~s.offset + 64, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,287 INFO L273 TraceCheckUtils]: 43: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,291 INFO L273 TraceCheckUtils]: 44: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,295 INFO L273 TraceCheckUtils]: 45: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,297 INFO L273 TraceCheckUtils]: 46: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume true; {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,297 INFO L273 TraceCheckUtils]: 47: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,299 INFO L273 TraceCheckUtils]: 48: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,299 INFO L273 TraceCheckUtils]: 49: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,301 INFO L273 TraceCheckUtils]: 50: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,301 INFO L273 TraceCheckUtils]: 51: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,303 INFO L273 TraceCheckUtils]: 52: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,320 INFO L273 TraceCheckUtils]: 53: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,329 INFO L273 TraceCheckUtils]: 54: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,343 INFO L273 TraceCheckUtils]: 55: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,343 INFO L273 TraceCheckUtils]: 56: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,347 INFO L273 TraceCheckUtils]: 57: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,349 INFO L273 TraceCheckUtils]: 58: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,349 INFO L273 TraceCheckUtils]: 59: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,351 INFO L273 TraceCheckUtils]: 60: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,351 INFO L273 TraceCheckUtils]: 61: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:42,353 INFO L273 TraceCheckUtils]: 62: Hoare triple {7695#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem35 == 4432);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {7696#(= 4560 |ssl3_connect_#t~mem36|)} is VALID [2018-11-14 19:17:42,353 INFO L273 TraceCheckUtils]: 63: Hoare triple {7696#(= 4560 |ssl3_connect_#t~mem36|)} assume #t~mem36 == 4433;havoc #t~mem36; {7694#false} is VALID [2018-11-14 19:17:42,353 INFO L273 TraceCheckUtils]: 64: Hoare triple {7694#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {7694#false} is VALID [2018-11-14 19:17:42,354 INFO L273 TraceCheckUtils]: 65: Hoare triple {7694#false} assume ~blastFlag~0 == 5; {7694#false} is VALID [2018-11-14 19:17:42,354 INFO L273 TraceCheckUtils]: 66: Hoare triple {7694#false} assume !false; {7694#false} is VALID [2018-11-14 19:17:42,366 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:17:42,366 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:42,366 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:17:42,367 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-14 19:17:42,367 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:42,367 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:17:42,470 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:42,471 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:17:42,471 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:17:42,471 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:17:42,472 INFO L87 Difference]: Start difference. First operand 422 states and 637 transitions. Second operand 4 states. [2018-11-14 19:17:45,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:45,045 INFO L93 Difference]: Finished difference Result 963 states and 1443 transitions. [2018-11-14 19:17:45,045 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:17:45,045 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-14 19:17:45,046 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:45,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:45,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 479 transitions. [2018-11-14 19:17:45,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:45,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 479 transitions. [2018-11-14 19:17:45,054 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 479 transitions. [2018-11-14 19:17:46,050 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 479 edges. 479 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:46,068 INFO L225 Difference]: With dead ends: 963 [2018-11-14 19:17:46,069 INFO L226 Difference]: Without dead ends: 554 [2018-11-14 19:17:46,070 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:17:46,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 554 states. [2018-11-14 19:17:46,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 554 to 424. [2018-11-14 19:17:46,366 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:46,366 INFO L82 GeneralOperation]: Start isEquivalent. First operand 554 states. Second operand 424 states. [2018-11-14 19:17:46,366 INFO L74 IsIncluded]: Start isIncluded. First operand 554 states. Second operand 424 states. [2018-11-14 19:17:46,366 INFO L87 Difference]: Start difference. First operand 554 states. Second operand 424 states. [2018-11-14 19:17:46,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:46,386 INFO L93 Difference]: Finished difference Result 554 states and 821 transitions. [2018-11-14 19:17:46,386 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 821 transitions. [2018-11-14 19:17:46,388 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:46,388 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:46,388 INFO L74 IsIncluded]: Start isIncluded. First operand 424 states. Second operand 554 states. [2018-11-14 19:17:46,388 INFO L87 Difference]: Start difference. First operand 424 states. Second operand 554 states. [2018-11-14 19:17:46,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:46,412 INFO L93 Difference]: Finished difference Result 554 states and 821 transitions. [2018-11-14 19:17:46,412 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 821 transitions. [2018-11-14 19:17:46,413 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:46,413 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:46,413 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:46,414 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:46,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 424 states. [2018-11-14 19:17:46,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 424 states to 424 states and 639 transitions. [2018-11-14 19:17:46,429 INFO L78 Accepts]: Start accepts. Automaton has 424 states and 639 transitions. Word has length 67 [2018-11-14 19:17:46,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:46,429 INFO L480 AbstractCegarLoop]: Abstraction has 424 states and 639 transitions. [2018-11-14 19:17:46,430 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:17:46,430 INFO L276 IsEmpty]: Start isEmpty. Operand 424 states and 639 transitions. [2018-11-14 19:17:46,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-14 19:17:46,432 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:46,432 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:46,432 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:46,432 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:46,432 INFO L82 PathProgramCache]: Analyzing trace with hash 859838970, now seen corresponding path program 1 times [2018-11-14 19:17:46,433 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:46,433 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:46,434 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:46,434 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:46,434 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:46,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:46,724 WARN L179 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-14 19:17:47,052 INFO L256 TraceCheckUtils]: 0: Hoare triple {10396#true} call ULTIMATE.init(); {10396#true} is VALID [2018-11-14 19:17:47,052 INFO L273 TraceCheckUtils]: 1: Hoare triple {10396#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {10396#true} is VALID [2018-11-14 19:17:47,052 INFO L273 TraceCheckUtils]: 2: Hoare triple {10396#true} assume true; {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10396#true} {10396#true} #590#return; {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L256 TraceCheckUtils]: 4: Hoare triple {10396#true} call #t~ret138 := main(); {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L273 TraceCheckUtils]: 5: Hoare triple {10396#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L256 TraceCheckUtils]: 6: Hoare triple {10396#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L273 TraceCheckUtils]: 7: Hoare triple {10396#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L273 TraceCheckUtils]: 8: Hoare triple {10396#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {10396#true} is VALID [2018-11-14 19:17:47,053 INFO L273 TraceCheckUtils]: 9: Hoare triple {10396#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {10396#true} is VALID [2018-11-14 19:17:47,054 INFO L273 TraceCheckUtils]: 10: Hoare triple {10396#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {10396#true} is VALID [2018-11-14 19:17:47,054 INFO L273 TraceCheckUtils]: 11: Hoare triple {10396#true} assume true; {10396#true} is VALID [2018-11-14 19:17:47,054 INFO L273 TraceCheckUtils]: 12: Hoare triple {10396#true} assume !false; {10396#true} is VALID [2018-11-14 19:17:47,054 INFO L273 TraceCheckUtils]: 13: Hoare triple {10396#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,054 INFO L273 TraceCheckUtils]: 14: Hoare triple {10396#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,055 INFO L273 TraceCheckUtils]: 15: Hoare triple {10396#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,055 INFO L273 TraceCheckUtils]: 16: Hoare triple {10396#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,055 INFO L273 TraceCheckUtils]: 17: Hoare triple {10396#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,055 INFO L273 TraceCheckUtils]: 18: Hoare triple {10396#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,057 INFO L273 TraceCheckUtils]: 19: Hoare triple {10396#true} assume #t~mem27 == 4368;havoc #t~mem27; {10396#true} is VALID [2018-11-14 19:17:47,057 INFO L273 TraceCheckUtils]: 20: Hoare triple {10396#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {10396#true} is VALID [2018-11-14 19:17:47,057 INFO L273 TraceCheckUtils]: 21: Hoare triple {10396#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {10396#true} is VALID [2018-11-14 19:17:47,058 INFO L273 TraceCheckUtils]: 22: Hoare triple {10396#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {10396#true} is VALID [2018-11-14 19:17:47,058 INFO L273 TraceCheckUtils]: 23: Hoare triple {10396#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {10396#true} is VALID [2018-11-14 19:17:47,058 INFO L273 TraceCheckUtils]: 24: Hoare triple {10396#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {10396#true} is VALID [2018-11-14 19:17:47,058 INFO L273 TraceCheckUtils]: 25: Hoare triple {10396#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10396#true} is VALID [2018-11-14 19:17:47,058 INFO L273 TraceCheckUtils]: 26: Hoare triple {10396#true} ~skip~0 := 0; {10396#true} is VALID [2018-11-14 19:17:47,059 INFO L273 TraceCheckUtils]: 27: Hoare triple {10396#true} assume true; {10396#true} is VALID [2018-11-14 19:17:47,059 INFO L273 TraceCheckUtils]: 28: Hoare triple {10396#true} assume !false; {10396#true} is VALID [2018-11-14 19:17:47,059 INFO L273 TraceCheckUtils]: 29: Hoare triple {10396#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,059 INFO L273 TraceCheckUtils]: 30: Hoare triple {10396#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,059 INFO L273 TraceCheckUtils]: 31: Hoare triple {10396#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,059 INFO L273 TraceCheckUtils]: 32: Hoare triple {10396#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,061 INFO L273 TraceCheckUtils]: 33: Hoare triple {10396#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,061 INFO L273 TraceCheckUtils]: 34: Hoare triple {10396#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,062 INFO L273 TraceCheckUtils]: 35: Hoare triple {10396#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,062 INFO L273 TraceCheckUtils]: 36: Hoare triple {10396#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {10396#true} is VALID [2018-11-14 19:17:47,062 INFO L273 TraceCheckUtils]: 37: Hoare triple {10396#true} assume #t~mem29 == 4384;havoc #t~mem29; {10396#true} is VALID [2018-11-14 19:17:47,062 INFO L273 TraceCheckUtils]: 38: Hoare triple {10396#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {10396#true} is VALID [2018-11-14 19:17:47,062 INFO L273 TraceCheckUtils]: 39: Hoare triple {10396#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {10396#true} is VALID [2018-11-14 19:17:47,063 INFO L273 TraceCheckUtils]: 40: Hoare triple {10396#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {10396#true} is VALID [2018-11-14 19:17:47,064 INFO L273 TraceCheckUtils]: 41: Hoare triple {10396#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,067 INFO L273 TraceCheckUtils]: 42: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, ~s.offset + 64, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,067 INFO L273 TraceCheckUtils]: 43: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,069 INFO L273 TraceCheckUtils]: 44: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,069 INFO L273 TraceCheckUtils]: 45: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,071 INFO L273 TraceCheckUtils]: 46: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume true; {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,071 INFO L273 TraceCheckUtils]: 47: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,073 INFO L273 TraceCheckUtils]: 48: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,073 INFO L273 TraceCheckUtils]: 49: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,075 INFO L273 TraceCheckUtils]: 50: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,075 INFO L273 TraceCheckUtils]: 51: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,077 INFO L273 TraceCheckUtils]: 52: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,077 INFO L273 TraceCheckUtils]: 53: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,077 INFO L273 TraceCheckUtils]: 54: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,078 INFO L273 TraceCheckUtils]: 55: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,078 INFO L273 TraceCheckUtils]: 56: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,078 INFO L273 TraceCheckUtils]: 57: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,079 INFO L273 TraceCheckUtils]: 58: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,079 INFO L273 TraceCheckUtils]: 59: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,079 INFO L273 TraceCheckUtils]: 60: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,080 INFO L273 TraceCheckUtils]: 61: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,080 INFO L273 TraceCheckUtils]: 62: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem35 == 4432);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:47,081 INFO L273 TraceCheckUtils]: 63: Hoare triple {10398#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem36 == 4433);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {10399#(= 4560 |ssl3_connect_#t~mem37|)} is VALID [2018-11-14 19:17:47,081 INFO L273 TraceCheckUtils]: 64: Hoare triple {10399#(= 4560 |ssl3_connect_#t~mem37|)} assume #t~mem37 == 4448;havoc #t~mem37; {10397#false} is VALID [2018-11-14 19:17:47,082 INFO L273 TraceCheckUtils]: 65: Hoare triple {10397#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {10397#false} is VALID [2018-11-14 19:17:47,082 INFO L273 TraceCheckUtils]: 66: Hoare triple {10397#false} assume ~blastFlag~0 == 4; {10397#false} is VALID [2018-11-14 19:17:47,082 INFO L273 TraceCheckUtils]: 67: Hoare triple {10397#false} assume !false; {10397#false} is VALID [2018-11-14 19:17:47,090 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:17:47,090 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:47,090 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:17:47,091 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-14 19:17:47,091 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:47,091 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:17:47,156 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:47,157 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:17:47,157 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:17:47,157 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:17:47,158 INFO L87 Difference]: Start difference. First operand 424 states and 639 transitions. Second operand 4 states. [2018-11-14 19:17:50,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:50,798 INFO L93 Difference]: Finished difference Result 965 states and 1443 transitions. [2018-11-14 19:17:50,798 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:17:50,798 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-14 19:17:50,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:50,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:50,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-14 19:17:50,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:50,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-14 19:17:50,806 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 478 transitions. [2018-11-14 19:17:51,945 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 478 edges. 478 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:51,962 INFO L225 Difference]: With dead ends: 965 [2018-11-14 19:17:51,962 INFO L226 Difference]: Without dead ends: 554 [2018-11-14 19:17:51,963 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:17:51,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 554 states. [2018-11-14 19:17:52,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 554 to 426. [2018-11-14 19:17:52,178 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:52,179 INFO L82 GeneralOperation]: Start isEquivalent. First operand 554 states. Second operand 426 states. [2018-11-14 19:17:52,179 INFO L74 IsIncluded]: Start isIncluded. First operand 554 states. Second operand 426 states. [2018-11-14 19:17:52,179 INFO L87 Difference]: Start difference. First operand 554 states. Second operand 426 states. [2018-11-14 19:17:52,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:52,201 INFO L93 Difference]: Finished difference Result 554 states and 819 transitions. [2018-11-14 19:17:52,201 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 819 transitions. [2018-11-14 19:17:52,203 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:52,203 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:52,203 INFO L74 IsIncluded]: Start isIncluded. First operand 426 states. Second operand 554 states. [2018-11-14 19:17:52,203 INFO L87 Difference]: Start difference. First operand 426 states. Second operand 554 states. [2018-11-14 19:17:52,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:52,225 INFO L93 Difference]: Finished difference Result 554 states and 819 transitions. [2018-11-14 19:17:52,225 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 819 transitions. [2018-11-14 19:17:52,227 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:52,227 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:52,227 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:52,227 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:52,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 426 states. [2018-11-14 19:17:52,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 641 transitions. [2018-11-14 19:17:52,241 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 641 transitions. Word has length 68 [2018-11-14 19:17:52,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:52,242 INFO L480 AbstractCegarLoop]: Abstraction has 426 states and 641 transitions. [2018-11-14 19:17:52,242 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:17:52,242 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 641 transitions. [2018-11-14 19:17:52,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-14 19:17:52,244 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:52,244 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:52,244 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:52,244 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:52,244 INFO L82 PathProgramCache]: Analyzing trace with hash 880727210, now seen corresponding path program 1 times [2018-11-14 19:17:52,245 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:52,245 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:52,246 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:52,246 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:52,246 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:52,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:52,553 WARN L179 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-14 19:17:52,908 INFO L256 TraceCheckUtils]: 0: Hoare triple {13103#true} call ULTIMATE.init(); {13103#true} is VALID [2018-11-14 19:17:52,908 INFO L273 TraceCheckUtils]: 1: Hoare triple {13103#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {13103#true} is VALID [2018-11-14 19:17:52,908 INFO L273 TraceCheckUtils]: 2: Hoare triple {13103#true} assume true; {13103#true} is VALID [2018-11-14 19:17:52,909 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13103#true} {13103#true} #590#return; {13103#true} is VALID [2018-11-14 19:17:52,909 INFO L256 TraceCheckUtils]: 4: Hoare triple {13103#true} call #t~ret138 := main(); {13103#true} is VALID [2018-11-14 19:17:52,909 INFO L273 TraceCheckUtils]: 5: Hoare triple {13103#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {13103#true} is VALID [2018-11-14 19:17:52,909 INFO L256 TraceCheckUtils]: 6: Hoare triple {13103#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {13103#true} is VALID [2018-11-14 19:17:52,909 INFO L273 TraceCheckUtils]: 7: Hoare triple {13103#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {13103#true} is VALID [2018-11-14 19:17:52,910 INFO L273 TraceCheckUtils]: 8: Hoare triple {13103#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {13103#true} is VALID [2018-11-14 19:17:52,910 INFO L273 TraceCheckUtils]: 9: Hoare triple {13103#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {13103#true} is VALID [2018-11-14 19:17:52,910 INFO L273 TraceCheckUtils]: 10: Hoare triple {13103#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {13103#true} is VALID [2018-11-14 19:17:52,910 INFO L273 TraceCheckUtils]: 11: Hoare triple {13103#true} assume true; {13103#true} is VALID [2018-11-14 19:17:52,910 INFO L273 TraceCheckUtils]: 12: Hoare triple {13103#true} assume !false; {13103#true} is VALID [2018-11-14 19:17:52,911 INFO L273 TraceCheckUtils]: 13: Hoare triple {13103#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,911 INFO L273 TraceCheckUtils]: 14: Hoare triple {13103#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,911 INFO L273 TraceCheckUtils]: 15: Hoare triple {13103#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,911 INFO L273 TraceCheckUtils]: 16: Hoare triple {13103#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,912 INFO L273 TraceCheckUtils]: 17: Hoare triple {13103#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,912 INFO L273 TraceCheckUtils]: 18: Hoare triple {13103#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,912 INFO L273 TraceCheckUtils]: 19: Hoare triple {13103#true} assume #t~mem27 == 4368;havoc #t~mem27; {13103#true} is VALID [2018-11-14 19:17:52,912 INFO L273 TraceCheckUtils]: 20: Hoare triple {13103#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {13103#true} is VALID [2018-11-14 19:17:52,912 INFO L273 TraceCheckUtils]: 21: Hoare triple {13103#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {13103#true} is VALID [2018-11-14 19:17:52,913 INFO L273 TraceCheckUtils]: 22: Hoare triple {13103#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {13103#true} is VALID [2018-11-14 19:17:52,913 INFO L273 TraceCheckUtils]: 23: Hoare triple {13103#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {13103#true} is VALID [2018-11-14 19:17:52,913 INFO L273 TraceCheckUtils]: 24: Hoare triple {13103#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {13103#true} is VALID [2018-11-14 19:17:52,913 INFO L273 TraceCheckUtils]: 25: Hoare triple {13103#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {13103#true} is VALID [2018-11-14 19:17:52,913 INFO L273 TraceCheckUtils]: 26: Hoare triple {13103#true} ~skip~0 := 0; {13103#true} is VALID [2018-11-14 19:17:52,914 INFO L273 TraceCheckUtils]: 27: Hoare triple {13103#true} assume true; {13103#true} is VALID [2018-11-14 19:17:52,914 INFO L273 TraceCheckUtils]: 28: Hoare triple {13103#true} assume !false; {13103#true} is VALID [2018-11-14 19:17:52,914 INFO L273 TraceCheckUtils]: 29: Hoare triple {13103#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,914 INFO L273 TraceCheckUtils]: 30: Hoare triple {13103#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,914 INFO L273 TraceCheckUtils]: 31: Hoare triple {13103#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,915 INFO L273 TraceCheckUtils]: 32: Hoare triple {13103#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,915 INFO L273 TraceCheckUtils]: 33: Hoare triple {13103#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,915 INFO L273 TraceCheckUtils]: 34: Hoare triple {13103#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,915 INFO L273 TraceCheckUtils]: 35: Hoare triple {13103#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,915 INFO L273 TraceCheckUtils]: 36: Hoare triple {13103#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {13103#true} is VALID [2018-11-14 19:17:52,916 INFO L273 TraceCheckUtils]: 37: Hoare triple {13103#true} assume #t~mem29 == 4384;havoc #t~mem29; {13103#true} is VALID [2018-11-14 19:17:52,916 INFO L273 TraceCheckUtils]: 38: Hoare triple {13103#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {13103#true} is VALID [2018-11-14 19:17:52,916 INFO L273 TraceCheckUtils]: 39: Hoare triple {13103#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {13103#true} is VALID [2018-11-14 19:17:52,916 INFO L273 TraceCheckUtils]: 40: Hoare triple {13103#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {13103#true} is VALID [2018-11-14 19:17:52,938 INFO L273 TraceCheckUtils]: 41: Hoare triple {13103#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,952 INFO L273 TraceCheckUtils]: 42: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, ~s.offset + 64, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,965 INFO L273 TraceCheckUtils]: 43: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,974 INFO L273 TraceCheckUtils]: 44: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,980 INFO L273 TraceCheckUtils]: 45: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,982 INFO L273 TraceCheckUtils]: 46: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume true; {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,983 INFO L273 TraceCheckUtils]: 47: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,983 INFO L273 TraceCheckUtils]: 48: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,983 INFO L273 TraceCheckUtils]: 49: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,984 INFO L273 TraceCheckUtils]: 50: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,984 INFO L273 TraceCheckUtils]: 51: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,984 INFO L273 TraceCheckUtils]: 52: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,985 INFO L273 TraceCheckUtils]: 53: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,985 INFO L273 TraceCheckUtils]: 54: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,985 INFO L273 TraceCheckUtils]: 55: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,986 INFO L273 TraceCheckUtils]: 56: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,986 INFO L273 TraceCheckUtils]: 57: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,987 INFO L273 TraceCheckUtils]: 58: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,987 INFO L273 TraceCheckUtils]: 59: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,988 INFO L273 TraceCheckUtils]: 60: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,992 INFO L273 TraceCheckUtils]: 61: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,992 INFO L273 TraceCheckUtils]: 62: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem35 == 4432);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,994 INFO L273 TraceCheckUtils]: 63: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem36 == 4433);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-14 19:17:52,994 INFO L273 TraceCheckUtils]: 64: Hoare triple {13105#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(#t~mem37 == 4448);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {13106#(= 4560 |ssl3_connect_#t~mem38|)} is VALID [2018-11-14 19:17:52,996 INFO L273 TraceCheckUtils]: 65: Hoare triple {13106#(= 4560 |ssl3_connect_#t~mem38|)} assume #t~mem38 == 4449;havoc #t~mem38; {13104#false} is VALID [2018-11-14 19:17:52,996 INFO L273 TraceCheckUtils]: 66: Hoare triple {13104#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {13104#false} is VALID [2018-11-14 19:17:52,996 INFO L273 TraceCheckUtils]: 67: Hoare triple {13104#false} assume ~blastFlag~0 == 4; {13104#false} is VALID [2018-11-14 19:17:52,996 INFO L273 TraceCheckUtils]: 68: Hoare triple {13104#false} assume !false; {13104#false} is VALID [2018-11-14 19:17:53,002 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:17:53,002 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:53,002 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:17:53,003 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-14 19:17:53,003 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:53,003 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:17:53,099 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:53,099 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:17:53,099 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:17:53,099 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:17:53,100 INFO L87 Difference]: Start difference. First operand 426 states and 641 transitions. Second operand 4 states. [2018-11-14 19:17:56,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:56,254 INFO L93 Difference]: Finished difference Result 957 states and 1431 transitions. [2018-11-14 19:17:56,254 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:17:56,254 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-14 19:17:56,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:17:56,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:56,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 470 transitions. [2018-11-14 19:17:56,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:17:56,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 470 transitions. [2018-11-14 19:17:56,262 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 470 transitions. [2018-11-14 19:17:56,822 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 470 edges. 470 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:56,839 INFO L225 Difference]: With dead ends: 957 [2018-11-14 19:17:56,839 INFO L226 Difference]: Without dead ends: 544 [2018-11-14 19:17:56,840 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:17:56,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 544 states. [2018-11-14 19:17:56,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 544 to 428. [2018-11-14 19:17:56,936 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:17:56,936 INFO L82 GeneralOperation]: Start isEquivalent. First operand 544 states. Second operand 428 states. [2018-11-14 19:17:56,936 INFO L74 IsIncluded]: Start isIncluded. First operand 544 states. Second operand 428 states. [2018-11-14 19:17:56,936 INFO L87 Difference]: Start difference. First operand 544 states. Second operand 428 states. [2018-11-14 19:17:56,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:56,954 INFO L93 Difference]: Finished difference Result 544 states and 805 transitions. [2018-11-14 19:17:56,954 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 805 transitions. [2018-11-14 19:17:56,955 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:56,956 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:56,956 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 544 states. [2018-11-14 19:17:56,956 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 544 states. [2018-11-14 19:17:56,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:17:56,974 INFO L93 Difference]: Finished difference Result 544 states and 805 transitions. [2018-11-14 19:17:56,974 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 805 transitions. [2018-11-14 19:17:56,975 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:17:56,976 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:17:56,976 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:17:56,976 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:17:56,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:17:56,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 643 transitions. [2018-11-14 19:17:56,989 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 643 transitions. Word has length 69 [2018-11-14 19:17:56,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:17:56,989 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 643 transitions. [2018-11-14 19:17:56,989 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:17:56,989 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 643 transitions. [2018-11-14 19:17:56,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-14 19:17:56,991 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:17:56,991 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:17:56,992 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:17:56,992 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:17:56,992 INFO L82 PathProgramCache]: Analyzing trace with hash -220758990, now seen corresponding path program 1 times [2018-11-14 19:17:56,992 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:17:56,992 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:17:56,993 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:56,993 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:17:56,993 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:17:57,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:17:57,222 INFO L256 TraceCheckUtils]: 0: Hoare triple {15781#true} call ULTIMATE.init(); {15781#true} is VALID [2018-11-14 19:17:57,222 INFO L273 TraceCheckUtils]: 1: Hoare triple {15781#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {15781#true} is VALID [2018-11-14 19:17:57,223 INFO L273 TraceCheckUtils]: 2: Hoare triple {15781#true} assume true; {15781#true} is VALID [2018-11-14 19:17:57,223 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15781#true} {15781#true} #590#return; {15781#true} is VALID [2018-11-14 19:17:57,223 INFO L256 TraceCheckUtils]: 4: Hoare triple {15781#true} call #t~ret138 := main(); {15781#true} is VALID [2018-11-14 19:17:57,223 INFO L273 TraceCheckUtils]: 5: Hoare triple {15781#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {15781#true} is VALID [2018-11-14 19:17:57,224 INFO L256 TraceCheckUtils]: 6: Hoare triple {15781#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {15781#true} is VALID [2018-11-14 19:17:57,224 INFO L273 TraceCheckUtils]: 7: Hoare triple {15781#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {15781#true} is VALID [2018-11-14 19:17:57,224 INFO L273 TraceCheckUtils]: 8: Hoare triple {15781#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {15781#true} is VALID [2018-11-14 19:17:57,224 INFO L273 TraceCheckUtils]: 9: Hoare triple {15781#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {15781#true} is VALID [2018-11-14 19:17:57,225 INFO L273 TraceCheckUtils]: 10: Hoare triple {15781#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {15781#true} is VALID [2018-11-14 19:17:57,225 INFO L273 TraceCheckUtils]: 11: Hoare triple {15781#true} assume true; {15781#true} is VALID [2018-11-14 19:17:57,225 INFO L273 TraceCheckUtils]: 12: Hoare triple {15781#true} assume !false; {15781#true} is VALID [2018-11-14 19:17:57,225 INFO L273 TraceCheckUtils]: 13: Hoare triple {15781#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,225 INFO L273 TraceCheckUtils]: 14: Hoare triple {15781#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 15: Hoare triple {15781#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 16: Hoare triple {15781#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 17: Hoare triple {15781#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 18: Hoare triple {15781#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 19: Hoare triple {15781#true} assume #t~mem27 == 4368;havoc #t~mem27; {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 20: Hoare triple {15781#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 21: Hoare triple {15781#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {15781#true} is VALID [2018-11-14 19:17:57,226 INFO L273 TraceCheckUtils]: 22: Hoare triple {15781#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 23: Hoare triple {15781#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 24: Hoare triple {15781#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 25: Hoare triple {15781#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 26: Hoare triple {15781#true} ~skip~0 := 0; {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 27: Hoare triple {15781#true} assume true; {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 28: Hoare triple {15781#true} assume !false; {15781#true} is VALID [2018-11-14 19:17:57,227 INFO L273 TraceCheckUtils]: 29: Hoare triple {15781#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 30: Hoare triple {15781#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 31: Hoare triple {15781#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 32: Hoare triple {15781#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 33: Hoare triple {15781#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 34: Hoare triple {15781#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 35: Hoare triple {15781#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,228 INFO L273 TraceCheckUtils]: 36: Hoare triple {15781#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {15781#true} is VALID [2018-11-14 19:17:57,229 INFO L273 TraceCheckUtils]: 37: Hoare triple {15781#true} assume #t~mem29 == 4384;havoc #t~mem29; {15781#true} is VALID [2018-11-14 19:17:57,229 INFO L273 TraceCheckUtils]: 38: Hoare triple {15781#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {15781#true} is VALID [2018-11-14 19:17:57,229 INFO L273 TraceCheckUtils]: 39: Hoare triple {15781#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {15781#true} is VALID [2018-11-14 19:17:57,229 INFO L273 TraceCheckUtils]: 40: Hoare triple {15781#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {15781#true} is VALID [2018-11-14 19:17:57,248 INFO L273 TraceCheckUtils]: 41: Hoare triple {15781#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,262 INFO L273 TraceCheckUtils]: 42: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,271 INFO L273 TraceCheckUtils]: 43: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,278 INFO L273 TraceCheckUtils]: 44: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,279 INFO L273 TraceCheckUtils]: 45: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,281 INFO L273 TraceCheckUtils]: 46: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,288 INFO L273 TraceCheckUtils]: 47: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:17:57,289 INFO L273 TraceCheckUtils]: 48: Hoare triple {15783#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {15784#(= |ssl3_connect_#t~mem22| 4560)} is VALID [2018-11-14 19:17:57,289 INFO L273 TraceCheckUtils]: 49: Hoare triple {15784#(= |ssl3_connect_#t~mem22| 4560)} assume #t~mem22 == 12292;havoc #t~mem22; {15782#false} is VALID [2018-11-14 19:17:57,289 INFO L273 TraceCheckUtils]: 50: Hoare triple {15782#false} call write~int(1, ~s.base, ~s.offset + 40, 4);call write~int(4096, ~s.base, ~s.offset + 52, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem56 := read~int(#t~mem55.base, #t~mem55.offset + 60 + 4, 4);call write~int(#t~mem56 + 1, #t~mem55.base, #t~mem55.offset + 60 + 4, 4);havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; {15782#false} is VALID [2018-11-14 19:17:57,289 INFO L273 TraceCheckUtils]: 51: Hoare triple {15782#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 52: Hoare triple {15782#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 53: Hoare triple {15782#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 54: Hoare triple {15782#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 55: Hoare triple {15782#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 56: Hoare triple {15782#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 57: Hoare triple {15782#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {15782#false} is VALID [2018-11-14 19:17:57,290 INFO L273 TraceCheckUtils]: 58: Hoare triple {15782#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {15782#false} is VALID [2018-11-14 19:17:57,291 INFO L273 TraceCheckUtils]: 59: Hoare triple {15782#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {15782#false} is VALID [2018-11-14 19:17:57,291 INFO L273 TraceCheckUtils]: 60: Hoare triple {15782#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {15782#false} is VALID [2018-11-14 19:17:57,291 INFO L273 TraceCheckUtils]: 61: Hoare triple {15782#false} ~skip~0 := 0; {15782#false} is VALID [2018-11-14 19:17:57,291 INFO L273 TraceCheckUtils]: 62: Hoare triple {15782#false} assume true; {15782#false} is VALID [2018-11-14 19:17:57,291 INFO L273 TraceCheckUtils]: 63: Hoare triple {15782#false} assume !false; {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 64: Hoare triple {15782#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 65: Hoare triple {15782#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 66: Hoare triple {15782#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 67: Hoare triple {15782#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 68: Hoare triple {15782#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 69: Hoare triple {15782#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,292 INFO L273 TraceCheckUtils]: 70: Hoare triple {15782#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 71: Hoare triple {15782#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 72: Hoare triple {15782#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 73: Hoare triple {15782#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 74: Hoare triple {15782#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 75: Hoare triple {15782#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 76: Hoare triple {15782#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,293 INFO L273 TraceCheckUtils]: 77: Hoare triple {15782#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {15782#false} is VALID [2018-11-14 19:17:57,294 INFO L273 TraceCheckUtils]: 78: Hoare triple {15782#false} assume #t~mem35 == 4432;havoc #t~mem35; {15782#false} is VALID [2018-11-14 19:17:57,294 INFO L273 TraceCheckUtils]: 79: Hoare triple {15782#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {15782#false} is VALID [2018-11-14 19:17:57,294 INFO L273 TraceCheckUtils]: 80: Hoare triple {15782#false} assume ~blastFlag~0 == 5; {15782#false} is VALID [2018-11-14 19:17:57,294 INFO L273 TraceCheckUtils]: 81: Hoare triple {15782#false} assume !false; {15782#false} is VALID [2018-11-14 19:17:57,298 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:17:57,298 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:17:57,298 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:17:57,299 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:17:57,299 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:17:57,299 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:17:57,373 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:17:57,373 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:17:57,374 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:17:57,374 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:17:57,374 INFO L87 Difference]: Start difference. First operand 428 states and 643 transitions. Second operand 4 states. [2018-11-14 19:18:00,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:00,322 INFO L93 Difference]: Finished difference Result 957 states and 1429 transitions. [2018-11-14 19:18:00,322 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:00,322 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:00,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:00,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:00,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 468 transitions. [2018-11-14 19:18:00,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:00,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 468 transitions. [2018-11-14 19:18:00,327 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 468 transitions. [2018-11-14 19:18:01,697 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 468 edges. 468 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:01,716 INFO L225 Difference]: With dead ends: 957 [2018-11-14 19:18:01,716 INFO L226 Difference]: Without dead ends: 542 [2018-11-14 19:18:01,717 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:01,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2018-11-14 19:18:01,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 428. [2018-11-14 19:18:01,871 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:01,872 INFO L82 GeneralOperation]: Start isEquivalent. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:01,872 INFO L74 IsIncluded]: Start isIncluded. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:01,872 INFO L87 Difference]: Start difference. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:01,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:01,888 INFO L93 Difference]: Finished difference Result 542 states and 801 transitions. [2018-11-14 19:18:01,888 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 801 transitions. [2018-11-14 19:18:01,889 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:01,890 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:01,890 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:01,890 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:01,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:01,908 INFO L93 Difference]: Finished difference Result 542 states and 801 transitions. [2018-11-14 19:18:01,908 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 801 transitions. [2018-11-14 19:18:01,909 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:01,909 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:01,909 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:01,909 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:01,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:01,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 641 transitions. [2018-11-14 19:18:01,922 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 641 transitions. Word has length 82 [2018-11-14 19:18:01,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:01,923 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 641 transitions. [2018-11-14 19:18:01,923 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:01,923 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 641 transitions. [2018-11-14 19:18:01,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-14 19:18:01,924 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:01,925 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:01,925 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:01,925 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:01,925 INFO L82 PathProgramCache]: Analyzing trace with hash -799078188, now seen corresponding path program 1 times [2018-11-14 19:18:01,925 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:01,925 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:01,926 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:01,926 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:01,927 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:01,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:02,105 INFO L256 TraceCheckUtils]: 0: Hoare triple {18453#true} call ULTIMATE.init(); {18453#true} is VALID [2018-11-14 19:18:02,105 INFO L273 TraceCheckUtils]: 1: Hoare triple {18453#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {18453#true} is VALID [2018-11-14 19:18:02,105 INFO L273 TraceCheckUtils]: 2: Hoare triple {18453#true} assume true; {18453#true} is VALID [2018-11-14 19:18:02,106 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18453#true} {18453#true} #590#return; {18453#true} is VALID [2018-11-14 19:18:02,106 INFO L256 TraceCheckUtils]: 4: Hoare triple {18453#true} call #t~ret138 := main(); {18453#true} is VALID [2018-11-14 19:18:02,106 INFO L273 TraceCheckUtils]: 5: Hoare triple {18453#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {18453#true} is VALID [2018-11-14 19:18:02,107 INFO L256 TraceCheckUtils]: 6: Hoare triple {18453#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {18453#true} is VALID [2018-11-14 19:18:02,107 INFO L273 TraceCheckUtils]: 7: Hoare triple {18453#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {18453#true} is VALID [2018-11-14 19:18:02,107 INFO L273 TraceCheckUtils]: 8: Hoare triple {18453#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {18453#true} is VALID [2018-11-14 19:18:02,108 INFO L273 TraceCheckUtils]: 9: Hoare triple {18453#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {18453#true} is VALID [2018-11-14 19:18:02,108 INFO L273 TraceCheckUtils]: 10: Hoare triple {18453#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {18453#true} is VALID [2018-11-14 19:18:02,108 INFO L273 TraceCheckUtils]: 11: Hoare triple {18453#true} assume true; {18453#true} is VALID [2018-11-14 19:18:02,108 INFO L273 TraceCheckUtils]: 12: Hoare triple {18453#true} assume !false; {18453#true} is VALID [2018-11-14 19:18:02,108 INFO L273 TraceCheckUtils]: 13: Hoare triple {18453#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,109 INFO L273 TraceCheckUtils]: 14: Hoare triple {18453#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,109 INFO L273 TraceCheckUtils]: 15: Hoare triple {18453#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,109 INFO L273 TraceCheckUtils]: 16: Hoare triple {18453#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,109 INFO L273 TraceCheckUtils]: 17: Hoare triple {18453#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,110 INFO L273 TraceCheckUtils]: 18: Hoare triple {18453#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,110 INFO L273 TraceCheckUtils]: 19: Hoare triple {18453#true} assume #t~mem27 == 4368;havoc #t~mem27; {18453#true} is VALID [2018-11-14 19:18:02,110 INFO L273 TraceCheckUtils]: 20: Hoare triple {18453#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {18453#true} is VALID [2018-11-14 19:18:02,110 INFO L273 TraceCheckUtils]: 21: Hoare triple {18453#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {18453#true} is VALID [2018-11-14 19:18:02,110 INFO L273 TraceCheckUtils]: 22: Hoare triple {18453#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {18453#true} is VALID [2018-11-14 19:18:02,111 INFO L273 TraceCheckUtils]: 23: Hoare triple {18453#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {18453#true} is VALID [2018-11-14 19:18:02,111 INFO L273 TraceCheckUtils]: 24: Hoare triple {18453#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {18453#true} is VALID [2018-11-14 19:18:02,111 INFO L273 TraceCheckUtils]: 25: Hoare triple {18453#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {18453#true} is VALID [2018-11-14 19:18:02,111 INFO L273 TraceCheckUtils]: 26: Hoare triple {18453#true} ~skip~0 := 0; {18453#true} is VALID [2018-11-14 19:18:02,111 INFO L273 TraceCheckUtils]: 27: Hoare triple {18453#true} assume true; {18453#true} is VALID [2018-11-14 19:18:02,112 INFO L273 TraceCheckUtils]: 28: Hoare triple {18453#true} assume !false; {18453#true} is VALID [2018-11-14 19:18:02,112 INFO L273 TraceCheckUtils]: 29: Hoare triple {18453#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,112 INFO L273 TraceCheckUtils]: 30: Hoare triple {18453#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,112 INFO L273 TraceCheckUtils]: 31: Hoare triple {18453#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,112 INFO L273 TraceCheckUtils]: 32: Hoare triple {18453#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,113 INFO L273 TraceCheckUtils]: 33: Hoare triple {18453#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,113 INFO L273 TraceCheckUtils]: 34: Hoare triple {18453#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,113 INFO L273 TraceCheckUtils]: 35: Hoare triple {18453#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,113 INFO L273 TraceCheckUtils]: 36: Hoare triple {18453#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {18453#true} is VALID [2018-11-14 19:18:02,113 INFO L273 TraceCheckUtils]: 37: Hoare triple {18453#true} assume #t~mem29 == 4384;havoc #t~mem29; {18453#true} is VALID [2018-11-14 19:18:02,113 INFO L273 TraceCheckUtils]: 38: Hoare triple {18453#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {18453#true} is VALID [2018-11-14 19:18:02,114 INFO L273 TraceCheckUtils]: 39: Hoare triple {18453#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {18453#true} is VALID [2018-11-14 19:18:02,114 INFO L273 TraceCheckUtils]: 40: Hoare triple {18453#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {18453#true} is VALID [2018-11-14 19:18:02,115 INFO L273 TraceCheckUtils]: 41: Hoare triple {18453#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,116 INFO L273 TraceCheckUtils]: 42: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,116 INFO L273 TraceCheckUtils]: 43: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,119 INFO L273 TraceCheckUtils]: 44: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,119 INFO L273 TraceCheckUtils]: 45: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,121 INFO L273 TraceCheckUtils]: 46: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,121 INFO L273 TraceCheckUtils]: 47: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,124 INFO L273 TraceCheckUtils]: 48: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:02,124 INFO L273 TraceCheckUtils]: 49: Hoare triple {18455#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {18456#(= |ssl3_connect_#t~mem23| 4560)} is VALID [2018-11-14 19:18:02,127 INFO L273 TraceCheckUtils]: 50: Hoare triple {18456#(= |ssl3_connect_#t~mem23| 4560)} assume #t~mem23 == 16384;havoc #t~mem23; {18454#false} is VALID [2018-11-14 19:18:02,127 INFO L273 TraceCheckUtils]: 51: Hoare triple {18454#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {18454#false} is VALID [2018-11-14 19:18:02,127 INFO L273 TraceCheckUtils]: 52: Hoare triple {18454#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {18454#false} is VALID [2018-11-14 19:18:02,127 INFO L273 TraceCheckUtils]: 53: Hoare triple {18454#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {18454#false} is VALID [2018-11-14 19:18:02,127 INFO L273 TraceCheckUtils]: 54: Hoare triple {18454#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {18454#false} is VALID [2018-11-14 19:18:02,127 INFO L273 TraceCheckUtils]: 55: Hoare triple {18454#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 56: Hoare triple {18454#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 57: Hoare triple {18454#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 58: Hoare triple {18454#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 59: Hoare triple {18454#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 60: Hoare triple {18454#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 61: Hoare triple {18454#false} ~skip~0 := 0; {18454#false} is VALID [2018-11-14 19:18:02,128 INFO L273 TraceCheckUtils]: 62: Hoare triple {18454#false} assume true; {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 63: Hoare triple {18454#false} assume !false; {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 64: Hoare triple {18454#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 65: Hoare triple {18454#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 66: Hoare triple {18454#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 67: Hoare triple {18454#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 68: Hoare triple {18454#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 69: Hoare triple {18454#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,129 INFO L273 TraceCheckUtils]: 70: Hoare triple {18454#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 71: Hoare triple {18454#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 72: Hoare triple {18454#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 73: Hoare triple {18454#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 74: Hoare triple {18454#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 75: Hoare triple {18454#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 76: Hoare triple {18454#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,130 INFO L273 TraceCheckUtils]: 77: Hoare triple {18454#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {18454#false} is VALID [2018-11-14 19:18:02,131 INFO L273 TraceCheckUtils]: 78: Hoare triple {18454#false} assume #t~mem35 == 4432;havoc #t~mem35; {18454#false} is VALID [2018-11-14 19:18:02,131 INFO L273 TraceCheckUtils]: 79: Hoare triple {18454#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {18454#false} is VALID [2018-11-14 19:18:02,131 INFO L273 TraceCheckUtils]: 80: Hoare triple {18454#false} assume ~blastFlag~0 == 5; {18454#false} is VALID [2018-11-14 19:18:02,131 INFO L273 TraceCheckUtils]: 81: Hoare triple {18454#false} assume !false; {18454#false} is VALID [2018-11-14 19:18:02,135 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:02,135 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:02,136 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:02,136 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:02,136 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:02,136 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:02,210 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:02,210 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:02,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:02,211 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:02,211 INFO L87 Difference]: Start difference. First operand 428 states and 641 transitions. Second operand 4 states. [2018-11-14 19:18:04,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:04,554 INFO L93 Difference]: Finished difference Result 957 states and 1425 transitions. [2018-11-14 19:18:04,554 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:04,554 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:04,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:04,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:04,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-14 19:18:04,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:04,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-14 19:18:04,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 467 transitions. [2018-11-14 19:18:05,007 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 467 edges. 467 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:05,030 INFO L225 Difference]: With dead ends: 957 [2018-11-14 19:18:05,030 INFO L226 Difference]: Without dead ends: 542 [2018-11-14 19:18:05,031 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:05,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2018-11-14 19:18:05,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 428. [2018-11-14 19:18:05,203 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:05,203 INFO L82 GeneralOperation]: Start isEquivalent. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:05,203 INFO L74 IsIncluded]: Start isIncluded. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:05,203 INFO L87 Difference]: Start difference. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:05,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:05,219 INFO L93 Difference]: Finished difference Result 542 states and 799 transitions. [2018-11-14 19:18:05,219 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 799 transitions. [2018-11-14 19:18:05,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:05,220 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:05,220 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:05,220 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:05,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:05,236 INFO L93 Difference]: Finished difference Result 542 states and 799 transitions. [2018-11-14 19:18:05,236 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 799 transitions. [2018-11-14 19:18:05,236 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:05,237 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:05,237 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:05,237 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:05,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:05,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 639 transitions. [2018-11-14 19:18:05,246 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 639 transitions. Word has length 82 [2018-11-14 19:18:05,246 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:05,246 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 639 transitions. [2018-11-14 19:18:05,246 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:05,246 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 639 transitions. [2018-11-14 19:18:05,247 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-14 19:18:05,247 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:05,247 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:05,247 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:05,248 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:05,248 INFO L82 PathProgramCache]: Analyzing trace with hash -1194761455, now seen corresponding path program 1 times [2018-11-14 19:18:05,248 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:05,248 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:05,249 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:05,249 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:05,249 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:05,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:05,456 INFO L256 TraceCheckUtils]: 0: Hoare triple {21125#true} call ULTIMATE.init(); {21125#true} is VALID [2018-11-14 19:18:05,457 INFO L273 TraceCheckUtils]: 1: Hoare triple {21125#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {21125#true} is VALID [2018-11-14 19:18:05,457 INFO L273 TraceCheckUtils]: 2: Hoare triple {21125#true} assume true; {21125#true} is VALID [2018-11-14 19:18:05,457 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {21125#true} {21125#true} #590#return; {21125#true} is VALID [2018-11-14 19:18:05,457 INFO L256 TraceCheckUtils]: 4: Hoare triple {21125#true} call #t~ret138 := main(); {21125#true} is VALID [2018-11-14 19:18:05,457 INFO L273 TraceCheckUtils]: 5: Hoare triple {21125#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {21125#true} is VALID [2018-11-14 19:18:05,458 INFO L256 TraceCheckUtils]: 6: Hoare triple {21125#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {21125#true} is VALID [2018-11-14 19:18:05,458 INFO L273 TraceCheckUtils]: 7: Hoare triple {21125#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {21125#true} is VALID [2018-11-14 19:18:05,458 INFO L273 TraceCheckUtils]: 8: Hoare triple {21125#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {21125#true} is VALID [2018-11-14 19:18:05,458 INFO L273 TraceCheckUtils]: 9: Hoare triple {21125#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 10: Hoare triple {21125#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 11: Hoare triple {21125#true} assume true; {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 12: Hoare triple {21125#true} assume !false; {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 13: Hoare triple {21125#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 14: Hoare triple {21125#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 15: Hoare triple {21125#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,459 INFO L273 TraceCheckUtils]: 16: Hoare triple {21125#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 17: Hoare triple {21125#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 18: Hoare triple {21125#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 19: Hoare triple {21125#true} assume #t~mem27 == 4368;havoc #t~mem27; {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 20: Hoare triple {21125#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 21: Hoare triple {21125#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 22: Hoare triple {21125#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {21125#true} is VALID [2018-11-14 19:18:05,460 INFO L273 TraceCheckUtils]: 23: Hoare triple {21125#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 24: Hoare triple {21125#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 25: Hoare triple {21125#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 26: Hoare triple {21125#true} ~skip~0 := 0; {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 27: Hoare triple {21125#true} assume true; {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 28: Hoare triple {21125#true} assume !false; {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 29: Hoare triple {21125#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 30: Hoare triple {21125#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,461 INFO L273 TraceCheckUtils]: 31: Hoare triple {21125#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 32: Hoare triple {21125#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 33: Hoare triple {21125#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 34: Hoare triple {21125#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 35: Hoare triple {21125#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 36: Hoare triple {21125#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 37: Hoare triple {21125#true} assume #t~mem29 == 4384;havoc #t~mem29; {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 38: Hoare triple {21125#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {21125#true} is VALID [2018-11-14 19:18:05,462 INFO L273 TraceCheckUtils]: 39: Hoare triple {21125#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {21125#true} is VALID [2018-11-14 19:18:05,463 INFO L273 TraceCheckUtils]: 40: Hoare triple {21125#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {21125#true} is VALID [2018-11-14 19:18:05,463 INFO L273 TraceCheckUtils]: 41: Hoare triple {21125#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,464 INFO L273 TraceCheckUtils]: 42: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,464 INFO L273 TraceCheckUtils]: 43: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,465 INFO L273 TraceCheckUtils]: 44: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,465 INFO L273 TraceCheckUtils]: 45: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,465 INFO L273 TraceCheckUtils]: 46: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,466 INFO L273 TraceCheckUtils]: 47: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,466 INFO L273 TraceCheckUtils]: 48: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,466 INFO L273 TraceCheckUtils]: 49: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,467 INFO L273 TraceCheckUtils]: 50: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,467 INFO L273 TraceCheckUtils]: 51: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,468 INFO L273 TraceCheckUtils]: 52: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:05,469 INFO L273 TraceCheckUtils]: 53: Hoare triple {21127#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21128#(= |ssl3_connect_#t~mem27| 4560)} is VALID [2018-11-14 19:18:05,469 INFO L273 TraceCheckUtils]: 54: Hoare triple {21128#(= |ssl3_connect_#t~mem27| 4560)} assume #t~mem27 == 4368;havoc #t~mem27; {21126#false} is VALID [2018-11-14 19:18:05,470 INFO L273 TraceCheckUtils]: 55: Hoare triple {21126#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {21126#false} is VALID [2018-11-14 19:18:05,470 INFO L273 TraceCheckUtils]: 56: Hoare triple {21126#false} assume !(~blastFlag~0 == 0); {21126#false} is VALID [2018-11-14 19:18:05,470 INFO L273 TraceCheckUtils]: 57: Hoare triple {21126#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {21126#false} is VALID [2018-11-14 19:18:05,470 INFO L273 TraceCheckUtils]: 58: Hoare triple {21126#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {21126#false} is VALID [2018-11-14 19:18:05,470 INFO L273 TraceCheckUtils]: 59: Hoare triple {21126#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {21126#false} is VALID [2018-11-14 19:18:05,471 INFO L273 TraceCheckUtils]: 60: Hoare triple {21126#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {21126#false} is VALID [2018-11-14 19:18:05,471 INFO L273 TraceCheckUtils]: 61: Hoare triple {21126#false} ~skip~0 := 0; {21126#false} is VALID [2018-11-14 19:18:05,471 INFO L273 TraceCheckUtils]: 62: Hoare triple {21126#false} assume true; {21126#false} is VALID [2018-11-14 19:18:05,471 INFO L273 TraceCheckUtils]: 63: Hoare triple {21126#false} assume !false; {21126#false} is VALID [2018-11-14 19:18:05,472 INFO L273 TraceCheckUtils]: 64: Hoare triple {21126#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,472 INFO L273 TraceCheckUtils]: 65: Hoare triple {21126#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,472 INFO L273 TraceCheckUtils]: 66: Hoare triple {21126#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,473 INFO L273 TraceCheckUtils]: 67: Hoare triple {21126#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,473 INFO L273 TraceCheckUtils]: 68: Hoare triple {21126#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,473 INFO L273 TraceCheckUtils]: 69: Hoare triple {21126#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,473 INFO L273 TraceCheckUtils]: 70: Hoare triple {21126#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,474 INFO L273 TraceCheckUtils]: 71: Hoare triple {21126#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,474 INFO L273 TraceCheckUtils]: 72: Hoare triple {21126#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,474 INFO L273 TraceCheckUtils]: 73: Hoare triple {21126#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,474 INFO L273 TraceCheckUtils]: 74: Hoare triple {21126#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,475 INFO L273 TraceCheckUtils]: 75: Hoare triple {21126#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,475 INFO L273 TraceCheckUtils]: 76: Hoare triple {21126#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,475 INFO L273 TraceCheckUtils]: 77: Hoare triple {21126#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {21126#false} is VALID [2018-11-14 19:18:05,475 INFO L273 TraceCheckUtils]: 78: Hoare triple {21126#false} assume #t~mem35 == 4432;havoc #t~mem35; {21126#false} is VALID [2018-11-14 19:18:05,475 INFO L273 TraceCheckUtils]: 79: Hoare triple {21126#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {21126#false} is VALID [2018-11-14 19:18:05,476 INFO L273 TraceCheckUtils]: 80: Hoare triple {21126#false} assume ~blastFlag~0 == 5; {21126#false} is VALID [2018-11-14 19:18:05,476 INFO L273 TraceCheckUtils]: 81: Hoare triple {21126#false} assume !false; {21126#false} is VALID [2018-11-14 19:18:05,482 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 60 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:05,483 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:05,483 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:05,483 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:05,483 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:05,484 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:05,563 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:05,563 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:05,563 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:05,564 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:05,564 INFO L87 Difference]: Start difference. First operand 428 states and 639 transitions. Second operand 4 states. [2018-11-14 19:18:08,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:08,657 INFO L93 Difference]: Finished difference Result 805 states and 1192 transitions. [2018-11-14 19:18:08,657 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:08,657 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:08,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:08,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:08,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-14 19:18:08,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:08,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-14 19:18:08,662 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 466 transitions. [2018-11-14 19:18:09,144 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:09,161 INFO L225 Difference]: With dead ends: 805 [2018-11-14 19:18:09,161 INFO L226 Difference]: Without dead ends: 542 [2018-11-14 19:18:09,162 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:09,162 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2018-11-14 19:18:09,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 428. [2018-11-14 19:18:09,768 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:09,768 INFO L82 GeneralOperation]: Start isEquivalent. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:09,768 INFO L74 IsIncluded]: Start isIncluded. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:09,769 INFO L87 Difference]: Start difference. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:09,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:09,785 INFO L93 Difference]: Finished difference Result 542 states and 797 transitions. [2018-11-14 19:18:09,785 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 797 transitions. [2018-11-14 19:18:09,786 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:09,786 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:09,786 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:09,786 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:09,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:09,804 INFO L93 Difference]: Finished difference Result 542 states and 797 transitions. [2018-11-14 19:18:09,804 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 797 transitions. [2018-11-14 19:18:09,805 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:09,806 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:09,806 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:09,806 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:09,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:09,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 637 transitions. [2018-11-14 19:18:09,819 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 637 transitions. Word has length 82 [2018-11-14 19:18:09,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:09,820 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 637 transitions. [2018-11-14 19:18:09,820 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:09,820 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 637 transitions. [2018-11-14 19:18:09,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-14 19:18:09,821 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:09,821 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:09,822 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:09,822 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:09,822 INFO L82 PathProgramCache]: Analyzing trace with hash 202887732, now seen corresponding path program 1 times [2018-11-14 19:18:09,822 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:09,822 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:09,823 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:09,823 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:09,823 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:09,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:10,032 INFO L256 TraceCheckUtils]: 0: Hoare triple {23628#true} call ULTIMATE.init(); {23628#true} is VALID [2018-11-14 19:18:10,033 INFO L273 TraceCheckUtils]: 1: Hoare triple {23628#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {23628#true} is VALID [2018-11-14 19:18:10,033 INFO L273 TraceCheckUtils]: 2: Hoare triple {23628#true} assume true; {23628#true} is VALID [2018-11-14 19:18:10,033 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23628#true} {23628#true} #590#return; {23628#true} is VALID [2018-11-14 19:18:10,033 INFO L256 TraceCheckUtils]: 4: Hoare triple {23628#true} call #t~ret138 := main(); {23628#true} is VALID [2018-11-14 19:18:10,034 INFO L273 TraceCheckUtils]: 5: Hoare triple {23628#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {23628#true} is VALID [2018-11-14 19:18:10,034 INFO L256 TraceCheckUtils]: 6: Hoare triple {23628#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {23628#true} is VALID [2018-11-14 19:18:10,034 INFO L273 TraceCheckUtils]: 7: Hoare triple {23628#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {23628#true} is VALID [2018-11-14 19:18:10,035 INFO L273 TraceCheckUtils]: 8: Hoare triple {23628#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {23628#true} is VALID [2018-11-14 19:18:10,035 INFO L273 TraceCheckUtils]: 9: Hoare triple {23628#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {23628#true} is VALID [2018-11-14 19:18:10,035 INFO L273 TraceCheckUtils]: 10: Hoare triple {23628#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {23628#true} is VALID [2018-11-14 19:18:10,035 INFO L273 TraceCheckUtils]: 11: Hoare triple {23628#true} assume true; {23628#true} is VALID [2018-11-14 19:18:10,036 INFO L273 TraceCheckUtils]: 12: Hoare triple {23628#true} assume !false; {23628#true} is VALID [2018-11-14 19:18:10,036 INFO L273 TraceCheckUtils]: 13: Hoare triple {23628#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,036 INFO L273 TraceCheckUtils]: 14: Hoare triple {23628#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,036 INFO L273 TraceCheckUtils]: 15: Hoare triple {23628#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,036 INFO L273 TraceCheckUtils]: 16: Hoare triple {23628#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,037 INFO L273 TraceCheckUtils]: 17: Hoare triple {23628#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,037 INFO L273 TraceCheckUtils]: 18: Hoare triple {23628#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,037 INFO L273 TraceCheckUtils]: 19: Hoare triple {23628#true} assume #t~mem27 == 4368;havoc #t~mem27; {23628#true} is VALID [2018-11-14 19:18:10,037 INFO L273 TraceCheckUtils]: 20: Hoare triple {23628#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {23628#true} is VALID [2018-11-14 19:18:10,037 INFO L273 TraceCheckUtils]: 21: Hoare triple {23628#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {23628#true} is VALID [2018-11-14 19:18:10,037 INFO L273 TraceCheckUtils]: 22: Hoare triple {23628#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {23628#true} is VALID [2018-11-14 19:18:10,038 INFO L273 TraceCheckUtils]: 23: Hoare triple {23628#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {23628#true} is VALID [2018-11-14 19:18:10,038 INFO L273 TraceCheckUtils]: 24: Hoare triple {23628#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {23628#true} is VALID [2018-11-14 19:18:10,038 INFO L273 TraceCheckUtils]: 25: Hoare triple {23628#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {23628#true} is VALID [2018-11-14 19:18:10,038 INFO L273 TraceCheckUtils]: 26: Hoare triple {23628#true} ~skip~0 := 0; {23628#true} is VALID [2018-11-14 19:18:10,038 INFO L273 TraceCheckUtils]: 27: Hoare triple {23628#true} assume true; {23628#true} is VALID [2018-11-14 19:18:10,038 INFO L273 TraceCheckUtils]: 28: Hoare triple {23628#true} assume !false; {23628#true} is VALID [2018-11-14 19:18:10,039 INFO L273 TraceCheckUtils]: 29: Hoare triple {23628#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,039 INFO L273 TraceCheckUtils]: 30: Hoare triple {23628#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,039 INFO L273 TraceCheckUtils]: 31: Hoare triple {23628#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,039 INFO L273 TraceCheckUtils]: 32: Hoare triple {23628#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,039 INFO L273 TraceCheckUtils]: 33: Hoare triple {23628#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,040 INFO L273 TraceCheckUtils]: 34: Hoare triple {23628#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,040 INFO L273 TraceCheckUtils]: 35: Hoare triple {23628#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,040 INFO L273 TraceCheckUtils]: 36: Hoare triple {23628#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {23628#true} is VALID [2018-11-14 19:18:10,040 INFO L273 TraceCheckUtils]: 37: Hoare triple {23628#true} assume #t~mem29 == 4384;havoc #t~mem29; {23628#true} is VALID [2018-11-14 19:18:10,040 INFO L273 TraceCheckUtils]: 38: Hoare triple {23628#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {23628#true} is VALID [2018-11-14 19:18:10,040 INFO L273 TraceCheckUtils]: 39: Hoare triple {23628#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {23628#true} is VALID [2018-11-14 19:18:10,041 INFO L273 TraceCheckUtils]: 40: Hoare triple {23628#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {23628#true} is VALID [2018-11-14 19:18:10,054 INFO L273 TraceCheckUtils]: 41: Hoare triple {23628#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,057 INFO L273 TraceCheckUtils]: 42: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, ~s.offset + 64, 4); {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,058 INFO L273 TraceCheckUtils]: 43: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,059 INFO L273 TraceCheckUtils]: 44: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,059 INFO L273 TraceCheckUtils]: 45: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,062 INFO L273 TraceCheckUtils]: 46: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume true; {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,062 INFO L273 TraceCheckUtils]: 47: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:10,064 INFO L273 TraceCheckUtils]: 48: Hoare triple {23630#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {23631#(= |ssl3_connect_#t~mem22| 4400)} is VALID [2018-11-14 19:18:10,064 INFO L273 TraceCheckUtils]: 49: Hoare triple {23631#(= |ssl3_connect_#t~mem22| 4400)} assume #t~mem22 == 12292;havoc #t~mem22; {23629#false} is VALID [2018-11-14 19:18:10,064 INFO L273 TraceCheckUtils]: 50: Hoare triple {23629#false} call write~int(1, ~s.base, ~s.offset + 40, 4);call write~int(4096, ~s.base, ~s.offset + 52, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem56 := read~int(#t~mem55.base, #t~mem55.offset + 60 + 4, 4);call write~int(#t~mem56 + 1, #t~mem55.base, #t~mem55.offset + 60 + 4, 4);havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; {23629#false} is VALID [2018-11-14 19:18:10,064 INFO L273 TraceCheckUtils]: 51: Hoare triple {23629#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {23629#false} is VALID [2018-11-14 19:18:10,064 INFO L273 TraceCheckUtils]: 52: Hoare triple {23629#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 53: Hoare triple {23629#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 54: Hoare triple {23629#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 55: Hoare triple {23629#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 56: Hoare triple {23629#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 57: Hoare triple {23629#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 58: Hoare triple {23629#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 59: Hoare triple {23629#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {23629#false} is VALID [2018-11-14 19:18:10,065 INFO L273 TraceCheckUtils]: 60: Hoare triple {23629#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 61: Hoare triple {23629#false} ~skip~0 := 0; {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 62: Hoare triple {23629#false} assume true; {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 63: Hoare triple {23629#false} assume !false; {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 64: Hoare triple {23629#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 65: Hoare triple {23629#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 66: Hoare triple {23629#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 67: Hoare triple {23629#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,066 INFO L273 TraceCheckUtils]: 68: Hoare triple {23629#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 69: Hoare triple {23629#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 70: Hoare triple {23629#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 71: Hoare triple {23629#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 72: Hoare triple {23629#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 73: Hoare triple {23629#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 74: Hoare triple {23629#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 75: Hoare triple {23629#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,067 INFO L273 TraceCheckUtils]: 76: Hoare triple {23629#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,068 INFO L273 TraceCheckUtils]: 77: Hoare triple {23629#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {23629#false} is VALID [2018-11-14 19:18:10,068 INFO L273 TraceCheckUtils]: 78: Hoare triple {23629#false} assume #t~mem35 == 4432;havoc #t~mem35; {23629#false} is VALID [2018-11-14 19:18:10,068 INFO L273 TraceCheckUtils]: 79: Hoare triple {23629#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {23629#false} is VALID [2018-11-14 19:18:10,068 INFO L273 TraceCheckUtils]: 80: Hoare triple {23629#false} assume ~blastFlag~0 == 5; {23629#false} is VALID [2018-11-14 19:18:10,068 INFO L273 TraceCheckUtils]: 81: Hoare triple {23629#false} assume !false; {23629#false} is VALID [2018-11-14 19:18:10,073 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:10,073 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:10,074 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:10,074 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:10,074 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:10,074 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:10,152 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:10,152 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:10,152 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:10,152 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:10,153 INFO L87 Difference]: Start difference. First operand 428 states and 637 transitions. Second operand 4 states. [2018-11-14 19:18:12,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:12,561 INFO L93 Difference]: Finished difference Result 885 states and 1310 transitions. [2018-11-14 19:18:12,561 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:12,561 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:12,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:12,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:12,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 403 transitions. [2018-11-14 19:18:12,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:12,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 403 transitions. [2018-11-14 19:18:12,567 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 403 transitions. [2018-11-14 19:18:12,944 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 403 edges. 403 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:12,957 INFO L225 Difference]: With dead ends: 885 [2018-11-14 19:18:12,958 INFO L226 Difference]: Without dead ends: 470 [2018-11-14 19:18:12,959 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:12,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2018-11-14 19:18:13,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 428. [2018-11-14 19:18:13,094 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:13,094 INFO L82 GeneralOperation]: Start isEquivalent. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:13,094 INFO L74 IsIncluded]: Start isIncluded. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:13,094 INFO L87 Difference]: Start difference. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:13,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:13,106 INFO L93 Difference]: Finished difference Result 470 states and 688 transitions. [2018-11-14 19:18:13,106 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 688 transitions. [2018-11-14 19:18:13,106 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:13,107 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:13,107 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:13,107 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:13,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:13,122 INFO L93 Difference]: Finished difference Result 470 states and 688 transitions. [2018-11-14 19:18:13,122 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 688 transitions. [2018-11-14 19:18:13,123 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:13,123 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:13,123 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:13,123 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:13,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:13,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 635 transitions. [2018-11-14 19:18:13,136 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 635 transitions. Word has length 82 [2018-11-14 19:18:13,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:13,136 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 635 transitions. [2018-11-14 19:18:13,136 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:13,137 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 635 transitions. [2018-11-14 19:18:13,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-14 19:18:13,138 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:13,138 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:13,138 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:13,138 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:13,139 INFO L82 PathProgramCache]: Analyzing trace with hash -375431466, now seen corresponding path program 1 times [2018-11-14 19:18:13,139 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:13,139 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:13,142 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:13,142 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:13,142 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:13,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:13,410 INFO L256 TraceCheckUtils]: 0: Hoare triple {26068#true} call ULTIMATE.init(); {26068#true} is VALID [2018-11-14 19:18:13,410 INFO L273 TraceCheckUtils]: 1: Hoare triple {26068#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {26068#true} is VALID [2018-11-14 19:18:13,410 INFO L273 TraceCheckUtils]: 2: Hoare triple {26068#true} assume true; {26068#true} is VALID [2018-11-14 19:18:13,410 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {26068#true} {26068#true} #590#return; {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L256 TraceCheckUtils]: 4: Hoare triple {26068#true} call #t~ret138 := main(); {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L273 TraceCheckUtils]: 5: Hoare triple {26068#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L256 TraceCheckUtils]: 6: Hoare triple {26068#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L273 TraceCheckUtils]: 7: Hoare triple {26068#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L273 TraceCheckUtils]: 8: Hoare triple {26068#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L273 TraceCheckUtils]: 9: Hoare triple {26068#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L273 TraceCheckUtils]: 10: Hoare triple {26068#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {26068#true} is VALID [2018-11-14 19:18:13,411 INFO L273 TraceCheckUtils]: 11: Hoare triple {26068#true} assume true; {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 12: Hoare triple {26068#true} assume !false; {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 13: Hoare triple {26068#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 14: Hoare triple {26068#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 15: Hoare triple {26068#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 16: Hoare triple {26068#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 17: Hoare triple {26068#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 18: Hoare triple {26068#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,412 INFO L273 TraceCheckUtils]: 19: Hoare triple {26068#true} assume #t~mem27 == 4368;havoc #t~mem27; {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 20: Hoare triple {26068#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 21: Hoare triple {26068#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 22: Hoare triple {26068#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 23: Hoare triple {26068#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 24: Hoare triple {26068#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 25: Hoare triple {26068#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 26: Hoare triple {26068#true} ~skip~0 := 0; {26068#true} is VALID [2018-11-14 19:18:13,413 INFO L273 TraceCheckUtils]: 27: Hoare triple {26068#true} assume true; {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 28: Hoare triple {26068#true} assume !false; {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 29: Hoare triple {26068#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 30: Hoare triple {26068#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 31: Hoare triple {26068#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 32: Hoare triple {26068#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 33: Hoare triple {26068#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 34: Hoare triple {26068#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,414 INFO L273 TraceCheckUtils]: 35: Hoare triple {26068#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,415 INFO L273 TraceCheckUtils]: 36: Hoare triple {26068#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {26068#true} is VALID [2018-11-14 19:18:13,415 INFO L273 TraceCheckUtils]: 37: Hoare triple {26068#true} assume #t~mem29 == 4384;havoc #t~mem29; {26068#true} is VALID [2018-11-14 19:18:13,415 INFO L273 TraceCheckUtils]: 38: Hoare triple {26068#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {26068#true} is VALID [2018-11-14 19:18:13,415 INFO L273 TraceCheckUtils]: 39: Hoare triple {26068#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {26068#true} is VALID [2018-11-14 19:18:13,415 INFO L273 TraceCheckUtils]: 40: Hoare triple {26068#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {26068#true} is VALID [2018-11-14 19:18:13,426 INFO L273 TraceCheckUtils]: 41: Hoare triple {26068#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,439 INFO L273 TraceCheckUtils]: 42: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, ~s.offset + 64, 4); {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,451 INFO L273 TraceCheckUtils]: 43: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,464 INFO L273 TraceCheckUtils]: 44: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,477 INFO L273 TraceCheckUtils]: 45: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,489 INFO L273 TraceCheckUtils]: 46: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume true; {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,502 INFO L273 TraceCheckUtils]: 47: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,514 INFO L273 TraceCheckUtils]: 48: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:13,521 INFO L273 TraceCheckUtils]: 49: Hoare triple {26070#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {26071#(= |ssl3_connect_#t~mem23| 4400)} is VALID [2018-11-14 19:18:13,522 INFO L273 TraceCheckUtils]: 50: Hoare triple {26071#(= |ssl3_connect_#t~mem23| 4400)} assume #t~mem23 == 16384;havoc #t~mem23; {26069#false} is VALID [2018-11-14 19:18:13,522 INFO L273 TraceCheckUtils]: 51: Hoare triple {26069#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {26069#false} is VALID [2018-11-14 19:18:13,522 INFO L273 TraceCheckUtils]: 52: Hoare triple {26069#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {26069#false} is VALID [2018-11-14 19:18:13,522 INFO L273 TraceCheckUtils]: 53: Hoare triple {26069#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {26069#false} is VALID [2018-11-14 19:18:13,523 INFO L273 TraceCheckUtils]: 54: Hoare triple {26069#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {26069#false} is VALID [2018-11-14 19:18:13,523 INFO L273 TraceCheckUtils]: 55: Hoare triple {26069#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {26069#false} is VALID [2018-11-14 19:18:13,523 INFO L273 TraceCheckUtils]: 56: Hoare triple {26069#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {26069#false} is VALID [2018-11-14 19:18:13,523 INFO L273 TraceCheckUtils]: 57: Hoare triple {26069#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {26069#false} is VALID [2018-11-14 19:18:13,523 INFO L273 TraceCheckUtils]: 58: Hoare triple {26069#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {26069#false} is VALID [2018-11-14 19:18:13,523 INFO L273 TraceCheckUtils]: 59: Hoare triple {26069#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {26069#false} is VALID [2018-11-14 19:18:13,524 INFO L273 TraceCheckUtils]: 60: Hoare triple {26069#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {26069#false} is VALID [2018-11-14 19:18:13,524 INFO L273 TraceCheckUtils]: 61: Hoare triple {26069#false} ~skip~0 := 0; {26069#false} is VALID [2018-11-14 19:18:13,524 INFO L273 TraceCheckUtils]: 62: Hoare triple {26069#false} assume true; {26069#false} is VALID [2018-11-14 19:18:13,524 INFO L273 TraceCheckUtils]: 63: Hoare triple {26069#false} assume !false; {26069#false} is VALID [2018-11-14 19:18:13,524 INFO L273 TraceCheckUtils]: 64: Hoare triple {26069#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,524 INFO L273 TraceCheckUtils]: 65: Hoare triple {26069#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,525 INFO L273 TraceCheckUtils]: 66: Hoare triple {26069#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,525 INFO L273 TraceCheckUtils]: 67: Hoare triple {26069#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,525 INFO L273 TraceCheckUtils]: 68: Hoare triple {26069#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,525 INFO L273 TraceCheckUtils]: 69: Hoare triple {26069#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,525 INFO L273 TraceCheckUtils]: 70: Hoare triple {26069#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,526 INFO L273 TraceCheckUtils]: 71: Hoare triple {26069#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,526 INFO L273 TraceCheckUtils]: 72: Hoare triple {26069#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,526 INFO L273 TraceCheckUtils]: 73: Hoare triple {26069#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,526 INFO L273 TraceCheckUtils]: 74: Hoare triple {26069#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,526 INFO L273 TraceCheckUtils]: 75: Hoare triple {26069#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,526 INFO L273 TraceCheckUtils]: 76: Hoare triple {26069#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,527 INFO L273 TraceCheckUtils]: 77: Hoare triple {26069#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {26069#false} is VALID [2018-11-14 19:18:13,527 INFO L273 TraceCheckUtils]: 78: Hoare triple {26069#false} assume #t~mem35 == 4432;havoc #t~mem35; {26069#false} is VALID [2018-11-14 19:18:13,527 INFO L273 TraceCheckUtils]: 79: Hoare triple {26069#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {26069#false} is VALID [2018-11-14 19:18:13,527 INFO L273 TraceCheckUtils]: 80: Hoare triple {26069#false} assume ~blastFlag~0 == 5; {26069#false} is VALID [2018-11-14 19:18:13,527 INFO L273 TraceCheckUtils]: 81: Hoare triple {26069#false} assume !false; {26069#false} is VALID [2018-11-14 19:18:13,533 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:13,533 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:13,533 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:13,534 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:13,534 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:13,534 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:13,669 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:13,669 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:13,669 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:13,669 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:13,670 INFO L87 Difference]: Start difference. First operand 428 states and 635 transitions. Second operand 4 states. [2018-11-14 19:18:15,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:15,879 INFO L93 Difference]: Finished difference Result 885 states and 1306 transitions. [2018-11-14 19:18:15,879 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:15,879 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:15,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:15,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:15,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 402 transitions. [2018-11-14 19:18:15,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:15,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 402 transitions. [2018-11-14 19:18:15,883 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 402 transitions. [2018-11-14 19:18:16,267 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 402 edges. 402 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:16,281 INFO L225 Difference]: With dead ends: 885 [2018-11-14 19:18:16,281 INFO L226 Difference]: Without dead ends: 470 [2018-11-14 19:18:16,282 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:16,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2018-11-14 19:18:16,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 428. [2018-11-14 19:18:16,470 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:16,470 INFO L82 GeneralOperation]: Start isEquivalent. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:16,470 INFO L74 IsIncluded]: Start isIncluded. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:16,470 INFO L87 Difference]: Start difference. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:16,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:16,485 INFO L93 Difference]: Finished difference Result 470 states and 686 transitions. [2018-11-14 19:18:16,485 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 686 transitions. [2018-11-14 19:18:16,486 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:16,486 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:16,486 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:16,486 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:16,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:16,500 INFO L93 Difference]: Finished difference Result 470 states and 686 transitions. [2018-11-14 19:18:16,501 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 686 transitions. [2018-11-14 19:18:16,501 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:16,501 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:16,502 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:16,502 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:16,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:16,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 633 transitions. [2018-11-14 19:18:16,514 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 633 transitions. Word has length 82 [2018-11-14 19:18:16,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:16,515 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 633 transitions. [2018-11-14 19:18:16,515 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:16,515 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 633 transitions. [2018-11-14 19:18:16,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-14 19:18:16,516 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:16,516 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:16,516 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:16,516 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:16,516 INFO L82 PathProgramCache]: Analyzing trace with hash -771114733, now seen corresponding path program 1 times [2018-11-14 19:18:16,517 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:16,517 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:16,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:16,518 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:16,518 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:16,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:17,139 INFO L256 TraceCheckUtils]: 0: Hoare triple {28508#true} call ULTIMATE.init(); {28508#true} is VALID [2018-11-14 19:18:17,140 INFO L273 TraceCheckUtils]: 1: Hoare triple {28508#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {28508#true} is VALID [2018-11-14 19:18:17,140 INFO L273 TraceCheckUtils]: 2: Hoare triple {28508#true} assume true; {28508#true} is VALID [2018-11-14 19:18:17,140 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {28508#true} {28508#true} #590#return; {28508#true} is VALID [2018-11-14 19:18:17,140 INFO L256 TraceCheckUtils]: 4: Hoare triple {28508#true} call #t~ret138 := main(); {28508#true} is VALID [2018-11-14 19:18:17,140 INFO L273 TraceCheckUtils]: 5: Hoare triple {28508#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {28508#true} is VALID [2018-11-14 19:18:17,140 INFO L256 TraceCheckUtils]: 6: Hoare triple {28508#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 7: Hoare triple {28508#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 8: Hoare triple {28508#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 9: Hoare triple {28508#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 10: Hoare triple {28508#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 11: Hoare triple {28508#true} assume true; {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 12: Hoare triple {28508#true} assume !false; {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 13: Hoare triple {28508#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 14: Hoare triple {28508#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,141 INFO L273 TraceCheckUtils]: 15: Hoare triple {28508#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 16: Hoare triple {28508#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 17: Hoare triple {28508#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 18: Hoare triple {28508#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 19: Hoare triple {28508#true} assume #t~mem27 == 4368;havoc #t~mem27; {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 20: Hoare triple {28508#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 21: Hoare triple {28508#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 22: Hoare triple {28508#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {28508#true} is VALID [2018-11-14 19:18:17,142 INFO L273 TraceCheckUtils]: 23: Hoare triple {28508#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 24: Hoare triple {28508#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 25: Hoare triple {28508#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 26: Hoare triple {28508#true} ~skip~0 := 0; {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 27: Hoare triple {28508#true} assume true; {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 28: Hoare triple {28508#true} assume !false; {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 29: Hoare triple {28508#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 30: Hoare triple {28508#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 31: Hoare triple {28508#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,143 INFO L273 TraceCheckUtils]: 32: Hoare triple {28508#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 33: Hoare triple {28508#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 34: Hoare triple {28508#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 35: Hoare triple {28508#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 36: Hoare triple {28508#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 37: Hoare triple {28508#true} assume #t~mem29 == 4384;havoc #t~mem29; {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 38: Hoare triple {28508#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 39: Hoare triple {28508#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {28508#true} is VALID [2018-11-14 19:18:17,144 INFO L273 TraceCheckUtils]: 40: Hoare triple {28508#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {28508#true} is VALID [2018-11-14 19:18:17,145 INFO L273 TraceCheckUtils]: 41: Hoare triple {28508#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,146 INFO L273 TraceCheckUtils]: 42: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, ~s.offset + 64, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,146 INFO L273 TraceCheckUtils]: 43: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,146 INFO L273 TraceCheckUtils]: 44: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,147 INFO L273 TraceCheckUtils]: 45: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,147 INFO L273 TraceCheckUtils]: 46: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume true; {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,147 INFO L273 TraceCheckUtils]: 47: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,148 INFO L273 TraceCheckUtils]: 48: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,148 INFO L273 TraceCheckUtils]: 49: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,148 INFO L273 TraceCheckUtils]: 50: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,149 INFO L273 TraceCheckUtils]: 51: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,149 INFO L273 TraceCheckUtils]: 52: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:17,150 INFO L273 TraceCheckUtils]: 53: Hoare triple {28510#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {28511#(= |ssl3_connect_#t~mem27| 4400)} is VALID [2018-11-14 19:18:17,151 INFO L273 TraceCheckUtils]: 54: Hoare triple {28511#(= |ssl3_connect_#t~mem27| 4400)} assume #t~mem27 == 4368;havoc #t~mem27; {28509#false} is VALID [2018-11-14 19:18:17,151 INFO L273 TraceCheckUtils]: 55: Hoare triple {28509#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {28509#false} is VALID [2018-11-14 19:18:17,151 INFO L273 TraceCheckUtils]: 56: Hoare triple {28509#false} assume !(~blastFlag~0 == 0); {28509#false} is VALID [2018-11-14 19:18:17,151 INFO L273 TraceCheckUtils]: 57: Hoare triple {28509#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {28509#false} is VALID [2018-11-14 19:18:17,151 INFO L273 TraceCheckUtils]: 58: Hoare triple {28509#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {28509#false} is VALID [2018-11-14 19:18:17,152 INFO L273 TraceCheckUtils]: 59: Hoare triple {28509#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {28509#false} is VALID [2018-11-14 19:18:17,152 INFO L273 TraceCheckUtils]: 60: Hoare triple {28509#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {28509#false} is VALID [2018-11-14 19:18:17,152 INFO L273 TraceCheckUtils]: 61: Hoare triple {28509#false} ~skip~0 := 0; {28509#false} is VALID [2018-11-14 19:18:17,152 INFO L273 TraceCheckUtils]: 62: Hoare triple {28509#false} assume true; {28509#false} is VALID [2018-11-14 19:18:17,152 INFO L273 TraceCheckUtils]: 63: Hoare triple {28509#false} assume !false; {28509#false} is VALID [2018-11-14 19:18:17,153 INFO L273 TraceCheckUtils]: 64: Hoare triple {28509#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,153 INFO L273 TraceCheckUtils]: 65: Hoare triple {28509#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,153 INFO L273 TraceCheckUtils]: 66: Hoare triple {28509#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,153 INFO L273 TraceCheckUtils]: 67: Hoare triple {28509#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,153 INFO L273 TraceCheckUtils]: 68: Hoare triple {28509#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,154 INFO L273 TraceCheckUtils]: 69: Hoare triple {28509#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,154 INFO L273 TraceCheckUtils]: 70: Hoare triple {28509#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,154 INFO L273 TraceCheckUtils]: 71: Hoare triple {28509#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,154 INFO L273 TraceCheckUtils]: 72: Hoare triple {28509#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,154 INFO L273 TraceCheckUtils]: 73: Hoare triple {28509#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,154 INFO L273 TraceCheckUtils]: 74: Hoare triple {28509#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,155 INFO L273 TraceCheckUtils]: 75: Hoare triple {28509#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,155 INFO L273 TraceCheckUtils]: 76: Hoare triple {28509#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,155 INFO L273 TraceCheckUtils]: 77: Hoare triple {28509#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {28509#false} is VALID [2018-11-14 19:18:17,155 INFO L273 TraceCheckUtils]: 78: Hoare triple {28509#false} assume #t~mem35 == 4432;havoc #t~mem35; {28509#false} is VALID [2018-11-14 19:18:17,155 INFO L273 TraceCheckUtils]: 79: Hoare triple {28509#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {28509#false} is VALID [2018-11-14 19:18:17,156 INFO L273 TraceCheckUtils]: 80: Hoare triple {28509#false} assume ~blastFlag~0 == 5; {28509#false} is VALID [2018-11-14 19:18:17,156 INFO L273 TraceCheckUtils]: 81: Hoare triple {28509#false} assume !false; {28509#false} is VALID [2018-11-14 19:18:17,161 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 60 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:17,161 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:17,162 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:17,162 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:17,162 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:17,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:17,238 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:17,238 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:17,238 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:17,238 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:17,239 INFO L87 Difference]: Start difference. First operand 428 states and 633 transitions. Second operand 4 states. [2018-11-14 19:18:20,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:20,135 INFO L93 Difference]: Finished difference Result 733 states and 1076 transitions. [2018-11-14 19:18:20,135 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:20,135 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-14 19:18:20,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:20,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:20,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 401 transitions. [2018-11-14 19:18:20,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:20,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 401 transitions. [2018-11-14 19:18:20,140 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 401 transitions. [2018-11-14 19:18:20,591 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 401 edges. 401 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:20,604 INFO L225 Difference]: With dead ends: 733 [2018-11-14 19:18:20,604 INFO L226 Difference]: Without dead ends: 470 [2018-11-14 19:18:20,605 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:20,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2018-11-14 19:18:20,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 428. [2018-11-14 19:18:20,762 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:20,762 INFO L82 GeneralOperation]: Start isEquivalent. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:20,762 INFO L74 IsIncluded]: Start isIncluded. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:20,762 INFO L87 Difference]: Start difference. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:20,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:20,774 INFO L93 Difference]: Finished difference Result 470 states and 684 transitions. [2018-11-14 19:18:20,774 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 684 transitions. [2018-11-14 19:18:20,775 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:20,775 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:20,775 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:20,775 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:20,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:20,787 INFO L93 Difference]: Finished difference Result 470 states and 684 transitions. [2018-11-14 19:18:20,787 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 684 transitions. [2018-11-14 19:18:20,788 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:20,788 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:20,788 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:20,788 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:20,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:20,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 631 transitions. [2018-11-14 19:18:20,797 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 631 transitions. Word has length 82 [2018-11-14 19:18:20,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:20,797 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 631 transitions. [2018-11-14 19:18:20,797 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:20,797 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 631 transitions. [2018-11-14 19:18:20,798 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 19:18:20,799 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:20,799 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:20,799 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:20,799 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:20,799 INFO L82 PathProgramCache]: Analyzing trace with hash -1276887068, now seen corresponding path program 1 times [2018-11-14 19:18:20,800 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:20,800 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:20,801 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:20,801 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:20,801 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:20,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:21,078 INFO L256 TraceCheckUtils]: 0: Hoare triple {30779#true} call ULTIMATE.init(); {30779#true} is VALID [2018-11-14 19:18:21,078 INFO L273 TraceCheckUtils]: 1: Hoare triple {30779#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {30779#true} is VALID [2018-11-14 19:18:21,078 INFO L273 TraceCheckUtils]: 2: Hoare triple {30779#true} assume true; {30779#true} is VALID [2018-11-14 19:18:21,079 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {30779#true} {30779#true} #590#return; {30779#true} is VALID [2018-11-14 19:18:21,079 INFO L256 TraceCheckUtils]: 4: Hoare triple {30779#true} call #t~ret138 := main(); {30779#true} is VALID [2018-11-14 19:18:21,079 INFO L273 TraceCheckUtils]: 5: Hoare triple {30779#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {30779#true} is VALID [2018-11-14 19:18:21,079 INFO L256 TraceCheckUtils]: 6: Hoare triple {30779#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {30779#true} is VALID [2018-11-14 19:18:21,079 INFO L273 TraceCheckUtils]: 7: Hoare triple {30779#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 8: Hoare triple {30779#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 9: Hoare triple {30779#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 10: Hoare triple {30779#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 11: Hoare triple {30779#true} assume true; {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 12: Hoare triple {30779#true} assume !false; {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 13: Hoare triple {30779#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 14: Hoare triple {30779#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,080 INFO L273 TraceCheckUtils]: 15: Hoare triple {30779#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 16: Hoare triple {30779#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 17: Hoare triple {30779#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 18: Hoare triple {30779#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 19: Hoare triple {30779#true} assume #t~mem27 == 4368;havoc #t~mem27; {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 20: Hoare triple {30779#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 21: Hoare triple {30779#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 22: Hoare triple {30779#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 23: Hoare triple {30779#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {30779#true} is VALID [2018-11-14 19:18:21,081 INFO L273 TraceCheckUtils]: 24: Hoare triple {30779#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 25: Hoare triple {30779#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 26: Hoare triple {30779#true} ~skip~0 := 0; {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 27: Hoare triple {30779#true} assume true; {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 28: Hoare triple {30779#true} assume !false; {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 29: Hoare triple {30779#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 30: Hoare triple {30779#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 31: Hoare triple {30779#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,082 INFO L273 TraceCheckUtils]: 32: Hoare triple {30779#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 33: Hoare triple {30779#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 34: Hoare triple {30779#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 35: Hoare triple {30779#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 36: Hoare triple {30779#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 37: Hoare triple {30779#true} assume #t~mem29 == 4384;havoc #t~mem29; {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 38: Hoare triple {30779#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 39: Hoare triple {30779#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {30779#true} is VALID [2018-11-14 19:18:21,083 INFO L273 TraceCheckUtils]: 40: Hoare triple {30779#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {30779#true} is VALID [2018-11-14 19:18:21,084 INFO L273 TraceCheckUtils]: 41: Hoare triple {30779#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,085 INFO L273 TraceCheckUtils]: 42: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,085 INFO L273 TraceCheckUtils]: 43: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,085 INFO L273 TraceCheckUtils]: 44: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,086 INFO L273 TraceCheckUtils]: 45: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,086 INFO L273 TraceCheckUtils]: 46: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,086 INFO L273 TraceCheckUtils]: 47: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,087 INFO L273 TraceCheckUtils]: 48: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,087 INFO L273 TraceCheckUtils]: 49: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:21,088 INFO L273 TraceCheckUtils]: 50: Hoare triple {30781#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {30782#(= |ssl3_connect_#t~mem24| 4560)} is VALID [2018-11-14 19:18:21,088 INFO L273 TraceCheckUtils]: 51: Hoare triple {30782#(= |ssl3_connect_#t~mem24| 4560)} assume #t~mem24 == 4096;havoc #t~mem24; {30780#false} is VALID [2018-11-14 19:18:21,088 INFO L273 TraceCheckUtils]: 52: Hoare triple {30780#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {30780#false} is VALID [2018-11-14 19:18:21,088 INFO L273 TraceCheckUtils]: 53: Hoare triple {30780#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {30780#false} is VALID [2018-11-14 19:18:21,088 INFO L273 TraceCheckUtils]: 54: Hoare triple {30780#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {30780#false} is VALID [2018-11-14 19:18:21,088 INFO L273 TraceCheckUtils]: 55: Hoare triple {30780#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {30780#false} is VALID [2018-11-14 19:18:21,089 INFO L273 TraceCheckUtils]: 56: Hoare triple {30780#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {30780#false} is VALID [2018-11-14 19:18:21,089 INFO L273 TraceCheckUtils]: 57: Hoare triple {30780#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {30780#false} is VALID [2018-11-14 19:18:21,089 INFO L273 TraceCheckUtils]: 58: Hoare triple {30780#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {30780#false} is VALID [2018-11-14 19:18:21,089 INFO L273 TraceCheckUtils]: 59: Hoare triple {30780#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {30780#false} is VALID [2018-11-14 19:18:21,089 INFO L273 TraceCheckUtils]: 60: Hoare triple {30780#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {30780#false} is VALID [2018-11-14 19:18:21,090 INFO L273 TraceCheckUtils]: 61: Hoare triple {30780#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {30780#false} is VALID [2018-11-14 19:18:21,090 INFO L273 TraceCheckUtils]: 62: Hoare triple {30780#false} ~skip~0 := 0; {30780#false} is VALID [2018-11-14 19:18:21,090 INFO L273 TraceCheckUtils]: 63: Hoare triple {30780#false} assume true; {30780#false} is VALID [2018-11-14 19:18:21,090 INFO L273 TraceCheckUtils]: 64: Hoare triple {30780#false} assume !false; {30780#false} is VALID [2018-11-14 19:18:21,090 INFO L273 TraceCheckUtils]: 65: Hoare triple {30780#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 66: Hoare triple {30780#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 67: Hoare triple {30780#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 68: Hoare triple {30780#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 69: Hoare triple {30780#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 70: Hoare triple {30780#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 71: Hoare triple {30780#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 72: Hoare triple {30780#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,091 INFO L273 TraceCheckUtils]: 73: Hoare triple {30780#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 74: Hoare triple {30780#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 75: Hoare triple {30780#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 76: Hoare triple {30780#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 77: Hoare triple {30780#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 78: Hoare triple {30780#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 79: Hoare triple {30780#false} assume #t~mem35 == 4432;havoc #t~mem35; {30780#false} is VALID [2018-11-14 19:18:21,092 INFO L273 TraceCheckUtils]: 80: Hoare triple {30780#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {30780#false} is VALID [2018-11-14 19:18:21,093 INFO L273 TraceCheckUtils]: 81: Hoare triple {30780#false} assume ~blastFlag~0 == 5; {30780#false} is VALID [2018-11-14 19:18:21,093 INFO L273 TraceCheckUtils]: 82: Hoare triple {30780#false} assume !false; {30780#false} is VALID [2018-11-14 19:18:21,097 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:21,097 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:21,097 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:21,098 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:21,098 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:21,098 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:21,170 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:21,170 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:21,170 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:21,171 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:21,171 INFO L87 Difference]: Start difference. First operand 428 states and 631 transitions. Second operand 4 states. [2018-11-14 19:18:23,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:23,691 INFO L93 Difference]: Finished difference Result 957 states and 1405 transitions. [2018-11-14 19:18:23,691 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:23,691 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:23,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:23,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:23,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-14 19:18:23,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:23,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-14 19:18:23,697 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 465 transitions. [2018-11-14 19:18:24,233 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:24,250 INFO L225 Difference]: With dead ends: 957 [2018-11-14 19:18:24,250 INFO L226 Difference]: Without dead ends: 542 [2018-11-14 19:18:24,251 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:24,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2018-11-14 19:18:24,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 428. [2018-11-14 19:18:24,569 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:24,569 INFO L82 GeneralOperation]: Start isEquivalent. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:24,569 INFO L74 IsIncluded]: Start isIncluded. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:24,569 INFO L87 Difference]: Start difference. First operand 542 states. Second operand 428 states. [2018-11-14 19:18:24,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:24,584 INFO L93 Difference]: Finished difference Result 542 states and 789 transitions. [2018-11-14 19:18:24,584 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 789 transitions. [2018-11-14 19:18:24,585 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:24,585 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:24,585 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:24,585 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 542 states. [2018-11-14 19:18:24,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:24,599 INFO L93 Difference]: Finished difference Result 542 states and 789 transitions. [2018-11-14 19:18:24,600 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 789 transitions. [2018-11-14 19:18:24,600 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:24,600 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:24,600 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:24,600 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:24,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:24,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 629 transitions. [2018-11-14 19:18:24,612 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 629 transitions. Word has length 83 [2018-11-14 19:18:24,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:24,612 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 629 transitions. [2018-11-14 19:18:24,612 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:24,612 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 629 transitions. [2018-11-14 19:18:24,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 19:18:24,613 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:24,613 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:24,614 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:24,614 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:24,614 INFO L82 PathProgramCache]: Analyzing trace with hash -1965131551, now seen corresponding path program 1 times [2018-11-14 19:18:24,614 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:24,614 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:24,615 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:24,615 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:24,615 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:24,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:24,756 INFO L256 TraceCheckUtils]: 0: Hoare triple {33451#true} call ULTIMATE.init(); {33451#true} is VALID [2018-11-14 19:18:24,756 INFO L273 TraceCheckUtils]: 1: Hoare triple {33451#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {33451#true} is VALID [2018-11-14 19:18:24,756 INFO L273 TraceCheckUtils]: 2: Hoare triple {33451#true} assume true; {33451#true} is VALID [2018-11-14 19:18:24,756 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {33451#true} {33451#true} #590#return; {33451#true} is VALID [2018-11-14 19:18:24,757 INFO L256 TraceCheckUtils]: 4: Hoare triple {33451#true} call #t~ret138 := main(); {33451#true} is VALID [2018-11-14 19:18:24,757 INFO L273 TraceCheckUtils]: 5: Hoare triple {33451#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {33451#true} is VALID [2018-11-14 19:18:24,757 INFO L256 TraceCheckUtils]: 6: Hoare triple {33451#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {33451#true} is VALID [2018-11-14 19:18:24,757 INFO L273 TraceCheckUtils]: 7: Hoare triple {33451#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {33451#true} is VALID [2018-11-14 19:18:24,757 INFO L273 TraceCheckUtils]: 8: Hoare triple {33451#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {33451#true} is VALID [2018-11-14 19:18:24,757 INFO L273 TraceCheckUtils]: 9: Hoare triple {33451#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 10: Hoare triple {33451#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 11: Hoare triple {33451#true} assume true; {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 12: Hoare triple {33451#true} assume !false; {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 13: Hoare triple {33451#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 14: Hoare triple {33451#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 15: Hoare triple {33451#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 16: Hoare triple {33451#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 17: Hoare triple {33451#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,758 INFO L273 TraceCheckUtils]: 18: Hoare triple {33451#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 19: Hoare triple {33451#true} assume #t~mem27 == 4368;havoc #t~mem27; {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 20: Hoare triple {33451#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 21: Hoare triple {33451#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 22: Hoare triple {33451#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 23: Hoare triple {33451#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 24: Hoare triple {33451#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 25: Hoare triple {33451#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {33451#true} is VALID [2018-11-14 19:18:24,759 INFO L273 TraceCheckUtils]: 26: Hoare triple {33451#true} ~skip~0 := 0; {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 27: Hoare triple {33451#true} assume true; {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 28: Hoare triple {33451#true} assume !false; {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 29: Hoare triple {33451#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 30: Hoare triple {33451#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 31: Hoare triple {33451#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 32: Hoare triple {33451#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 33: Hoare triple {33451#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 34: Hoare triple {33451#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,760 INFO L273 TraceCheckUtils]: 35: Hoare triple {33451#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,761 INFO L273 TraceCheckUtils]: 36: Hoare triple {33451#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {33451#true} is VALID [2018-11-14 19:18:24,761 INFO L273 TraceCheckUtils]: 37: Hoare triple {33451#true} assume #t~mem29 == 4384;havoc #t~mem29; {33451#true} is VALID [2018-11-14 19:18:24,761 INFO L273 TraceCheckUtils]: 38: Hoare triple {33451#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {33451#true} is VALID [2018-11-14 19:18:24,761 INFO L273 TraceCheckUtils]: 39: Hoare triple {33451#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {33451#true} is VALID [2018-11-14 19:18:24,761 INFO L273 TraceCheckUtils]: 40: Hoare triple {33451#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {33451#true} is VALID [2018-11-14 19:18:24,762 INFO L273 TraceCheckUtils]: 41: Hoare triple {33451#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,762 INFO L273 TraceCheckUtils]: 42: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,763 INFO L273 TraceCheckUtils]: 43: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,763 INFO L273 TraceCheckUtils]: 44: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,763 INFO L273 TraceCheckUtils]: 45: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,764 INFO L273 TraceCheckUtils]: 46: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,764 INFO L273 TraceCheckUtils]: 47: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,765 INFO L273 TraceCheckUtils]: 48: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,765 INFO L273 TraceCheckUtils]: 49: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,766 INFO L273 TraceCheckUtils]: 50: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,766 INFO L273 TraceCheckUtils]: 51: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,767 INFO L273 TraceCheckUtils]: 52: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,767 INFO L273 TraceCheckUtils]: 53: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:24,768 INFO L273 TraceCheckUtils]: 54: Hoare triple {33453#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {33454#(= |ssl3_connect_#t~mem28| 4560)} is VALID [2018-11-14 19:18:24,768 INFO L273 TraceCheckUtils]: 55: Hoare triple {33454#(= |ssl3_connect_#t~mem28| 4560)} assume #t~mem28 == 4369;havoc #t~mem28; {33452#false} is VALID [2018-11-14 19:18:24,769 INFO L273 TraceCheckUtils]: 56: Hoare triple {33452#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {33452#false} is VALID [2018-11-14 19:18:24,769 INFO L273 TraceCheckUtils]: 57: Hoare triple {33452#false} assume !(~blastFlag~0 == 0); {33452#false} is VALID [2018-11-14 19:18:24,769 INFO L273 TraceCheckUtils]: 58: Hoare triple {33452#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {33452#false} is VALID [2018-11-14 19:18:24,769 INFO L273 TraceCheckUtils]: 59: Hoare triple {33452#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {33452#false} is VALID [2018-11-14 19:18:24,770 INFO L273 TraceCheckUtils]: 60: Hoare triple {33452#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {33452#false} is VALID [2018-11-14 19:18:24,770 INFO L273 TraceCheckUtils]: 61: Hoare triple {33452#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {33452#false} is VALID [2018-11-14 19:18:24,770 INFO L273 TraceCheckUtils]: 62: Hoare triple {33452#false} ~skip~0 := 0; {33452#false} is VALID [2018-11-14 19:18:24,770 INFO L273 TraceCheckUtils]: 63: Hoare triple {33452#false} assume true; {33452#false} is VALID [2018-11-14 19:18:24,770 INFO L273 TraceCheckUtils]: 64: Hoare triple {33452#false} assume !false; {33452#false} is VALID [2018-11-14 19:18:24,770 INFO L273 TraceCheckUtils]: 65: Hoare triple {33452#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,771 INFO L273 TraceCheckUtils]: 66: Hoare triple {33452#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,771 INFO L273 TraceCheckUtils]: 67: Hoare triple {33452#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,771 INFO L273 TraceCheckUtils]: 68: Hoare triple {33452#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,771 INFO L273 TraceCheckUtils]: 69: Hoare triple {33452#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,771 INFO L273 TraceCheckUtils]: 70: Hoare triple {33452#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,771 INFO L273 TraceCheckUtils]: 71: Hoare triple {33452#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 72: Hoare triple {33452#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 73: Hoare triple {33452#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 74: Hoare triple {33452#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 75: Hoare triple {33452#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 76: Hoare triple {33452#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 77: Hoare triple {33452#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 78: Hoare triple {33452#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {33452#false} is VALID [2018-11-14 19:18:24,772 INFO L273 TraceCheckUtils]: 79: Hoare triple {33452#false} assume #t~mem35 == 4432;havoc #t~mem35; {33452#false} is VALID [2018-11-14 19:18:24,773 INFO L273 TraceCheckUtils]: 80: Hoare triple {33452#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {33452#false} is VALID [2018-11-14 19:18:24,773 INFO L273 TraceCheckUtils]: 81: Hoare triple {33452#false} assume ~blastFlag~0 == 5; {33452#false} is VALID [2018-11-14 19:18:24,773 INFO L273 TraceCheckUtils]: 82: Hoare triple {33452#false} assume !false; {33452#false} is VALID [2018-11-14 19:18:24,778 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:24,778 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:24,778 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:24,779 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:24,779 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:24,779 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:24,848 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:24,849 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:24,849 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:24,849 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:24,850 INFO L87 Difference]: Start difference. First operand 428 states and 629 transitions. Second operand 4 states. [2018-11-14 19:18:27,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:27,532 INFO L93 Difference]: Finished difference Result 799 states and 1170 transitions. [2018-11-14 19:18:27,532 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:27,532 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:27,533 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:27,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:27,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 460 transitions. [2018-11-14 19:18:27,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:27,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 460 transitions. [2018-11-14 19:18:27,537 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 460 transitions. [2018-11-14 19:18:27,997 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 460 edges. 460 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:28,014 INFO L225 Difference]: With dead ends: 799 [2018-11-14 19:18:28,014 INFO L226 Difference]: Without dead ends: 536 [2018-11-14 19:18:28,015 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:28,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2018-11-14 19:18:28,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 428. [2018-11-14 19:18:28,181 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:28,181 INFO L82 GeneralOperation]: Start isEquivalent. First operand 536 states. Second operand 428 states. [2018-11-14 19:18:28,182 INFO L74 IsIncluded]: Start isIncluded. First operand 536 states. Second operand 428 states. [2018-11-14 19:18:28,182 INFO L87 Difference]: Start difference. First operand 536 states. Second operand 428 states. [2018-11-14 19:18:28,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:28,196 INFO L93 Difference]: Finished difference Result 536 states and 780 transitions. [2018-11-14 19:18:28,196 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 780 transitions. [2018-11-14 19:18:28,197 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:28,197 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:28,197 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 536 states. [2018-11-14 19:18:28,197 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 536 states. [2018-11-14 19:18:28,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:28,207 INFO L93 Difference]: Finished difference Result 536 states and 780 transitions. [2018-11-14 19:18:28,208 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 780 transitions. [2018-11-14 19:18:28,208 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:28,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:28,208 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:28,208 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:28,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:28,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 627 transitions. [2018-11-14 19:18:28,217 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 627 transitions. Word has length 83 [2018-11-14 19:18:28,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:28,217 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 627 transitions. [2018-11-14 19:18:28,217 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:28,217 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 627 transitions. [2018-11-14 19:18:28,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 19:18:28,218 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:28,218 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:28,218 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:28,218 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:28,219 INFO L82 PathProgramCache]: Analyzing trace with hash -1028740574, now seen corresponding path program 1 times [2018-11-14 19:18:28,219 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:28,219 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:28,219 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:28,220 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:28,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:28,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:28,760 INFO L256 TraceCheckUtils]: 0: Hoare triple {35934#true} call ULTIMATE.init(); {35934#true} is VALID [2018-11-14 19:18:28,760 INFO L273 TraceCheckUtils]: 1: Hoare triple {35934#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {35934#true} is VALID [2018-11-14 19:18:28,760 INFO L273 TraceCheckUtils]: 2: Hoare triple {35934#true} assume true; {35934#true} is VALID [2018-11-14 19:18:28,760 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35934#true} {35934#true} #590#return; {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L256 TraceCheckUtils]: 4: Hoare triple {35934#true} call #t~ret138 := main(); {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L273 TraceCheckUtils]: 5: Hoare triple {35934#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L256 TraceCheckUtils]: 6: Hoare triple {35934#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L273 TraceCheckUtils]: 7: Hoare triple {35934#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L273 TraceCheckUtils]: 8: Hoare triple {35934#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L273 TraceCheckUtils]: 9: Hoare triple {35934#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L273 TraceCheckUtils]: 10: Hoare triple {35934#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {35934#true} is VALID [2018-11-14 19:18:28,761 INFO L273 TraceCheckUtils]: 11: Hoare triple {35934#true} assume true; {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 12: Hoare triple {35934#true} assume !false; {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 13: Hoare triple {35934#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 14: Hoare triple {35934#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 15: Hoare triple {35934#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 16: Hoare triple {35934#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 17: Hoare triple {35934#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 18: Hoare triple {35934#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,762 INFO L273 TraceCheckUtils]: 19: Hoare triple {35934#true} assume #t~mem27 == 4368;havoc #t~mem27; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 20: Hoare triple {35934#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 21: Hoare triple {35934#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 22: Hoare triple {35934#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 23: Hoare triple {35934#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 24: Hoare triple {35934#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 25: Hoare triple {35934#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 26: Hoare triple {35934#true} ~skip~0 := 0; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 27: Hoare triple {35934#true} assume true; {35934#true} is VALID [2018-11-14 19:18:28,763 INFO L273 TraceCheckUtils]: 28: Hoare triple {35934#true} assume !false; {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 29: Hoare triple {35934#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 30: Hoare triple {35934#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 31: Hoare triple {35934#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 32: Hoare triple {35934#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 33: Hoare triple {35934#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 34: Hoare triple {35934#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 35: Hoare triple {35934#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,764 INFO L273 TraceCheckUtils]: 36: Hoare triple {35934#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {35934#true} is VALID [2018-11-14 19:18:28,765 INFO L273 TraceCheckUtils]: 37: Hoare triple {35934#true} assume #t~mem29 == 4384;havoc #t~mem29; {35934#true} is VALID [2018-11-14 19:18:28,765 INFO L273 TraceCheckUtils]: 38: Hoare triple {35934#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {35934#true} is VALID [2018-11-14 19:18:28,765 INFO L273 TraceCheckUtils]: 39: Hoare triple {35934#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {35934#true} is VALID [2018-11-14 19:18:28,765 INFO L273 TraceCheckUtils]: 40: Hoare triple {35934#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {35934#true} is VALID [2018-11-14 19:18:28,766 INFO L273 TraceCheckUtils]: 41: Hoare triple {35934#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,769 INFO L273 TraceCheckUtils]: 42: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, ~s.offset + 64, 4); {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,769 INFO L273 TraceCheckUtils]: 43: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,771 INFO L273 TraceCheckUtils]: 44: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,771 INFO L273 TraceCheckUtils]: 45: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,773 INFO L273 TraceCheckUtils]: 46: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume true; {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,773 INFO L273 TraceCheckUtils]: 47: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,775 INFO L273 TraceCheckUtils]: 48: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,775 INFO L273 TraceCheckUtils]: 49: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:28,777 INFO L273 TraceCheckUtils]: 50: Hoare triple {35936#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {35937#(= |ssl3_connect_#t~mem24| 4400)} is VALID [2018-11-14 19:18:28,777 INFO L273 TraceCheckUtils]: 51: Hoare triple {35937#(= |ssl3_connect_#t~mem24| 4400)} assume #t~mem24 == 4096;havoc #t~mem24; {35935#false} is VALID [2018-11-14 19:18:28,777 INFO L273 TraceCheckUtils]: 52: Hoare triple {35935#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {35935#false} is VALID [2018-11-14 19:18:28,777 INFO L273 TraceCheckUtils]: 53: Hoare triple {35935#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {35935#false} is VALID [2018-11-14 19:18:28,777 INFO L273 TraceCheckUtils]: 54: Hoare triple {35935#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 55: Hoare triple {35935#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 56: Hoare triple {35935#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 57: Hoare triple {35935#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 58: Hoare triple {35935#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 59: Hoare triple {35935#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 60: Hoare triple {35935#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 61: Hoare triple {35935#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {35935#false} is VALID [2018-11-14 19:18:28,778 INFO L273 TraceCheckUtils]: 62: Hoare triple {35935#false} ~skip~0 := 0; {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 63: Hoare triple {35935#false} assume true; {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 64: Hoare triple {35935#false} assume !false; {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 65: Hoare triple {35935#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 66: Hoare triple {35935#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 67: Hoare triple {35935#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 68: Hoare triple {35935#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 69: Hoare triple {35935#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 70: Hoare triple {35935#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,779 INFO L273 TraceCheckUtils]: 71: Hoare triple {35935#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 72: Hoare triple {35935#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 73: Hoare triple {35935#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 74: Hoare triple {35935#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 75: Hoare triple {35935#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 76: Hoare triple {35935#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 77: Hoare triple {35935#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 78: Hoare triple {35935#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {35935#false} is VALID [2018-11-14 19:18:28,780 INFO L273 TraceCheckUtils]: 79: Hoare triple {35935#false} assume #t~mem35 == 4432;havoc #t~mem35; {35935#false} is VALID [2018-11-14 19:18:28,781 INFO L273 TraceCheckUtils]: 80: Hoare triple {35935#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {35935#false} is VALID [2018-11-14 19:18:28,781 INFO L273 TraceCheckUtils]: 81: Hoare triple {35935#false} assume ~blastFlag~0 == 5; {35935#false} is VALID [2018-11-14 19:18:28,781 INFO L273 TraceCheckUtils]: 82: Hoare triple {35935#false} assume !false; {35935#false} is VALID [2018-11-14 19:18:28,785 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:28,785 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:28,786 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:28,786 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:28,786 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:28,786 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:28,899 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:28,899 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:28,899 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:28,899 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:28,899 INFO L87 Difference]: Start difference. First operand 428 states and 627 transitions. Second operand 4 states. [2018-11-14 19:18:30,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:30,991 INFO L93 Difference]: Finished difference Result 885 states and 1290 transitions. [2018-11-14 19:18:30,991 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:30,992 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:30,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:30,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:30,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 400 transitions. [2018-11-14 19:18:30,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:30,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 400 transitions. [2018-11-14 19:18:30,995 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 400 transitions. [2018-11-14 19:18:31,365 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 400 edges. 400 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:31,378 INFO L225 Difference]: With dead ends: 885 [2018-11-14 19:18:31,378 INFO L226 Difference]: Without dead ends: 470 [2018-11-14 19:18:31,379 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:31,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2018-11-14 19:18:31,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 428. [2018-11-14 19:18:31,597 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:31,597 INFO L82 GeneralOperation]: Start isEquivalent. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:31,597 INFO L74 IsIncluded]: Start isIncluded. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:31,597 INFO L87 Difference]: Start difference. First operand 470 states. Second operand 428 states. [2018-11-14 19:18:31,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:31,608 INFO L93 Difference]: Finished difference Result 470 states and 678 transitions. [2018-11-14 19:18:31,608 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 678 transitions. [2018-11-14 19:18:31,609 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:31,609 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:31,609 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:31,609 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 470 states. [2018-11-14 19:18:31,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:31,619 INFO L93 Difference]: Finished difference Result 470 states and 678 transitions. [2018-11-14 19:18:31,619 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 678 transitions. [2018-11-14 19:18:31,620 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:31,620 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:31,620 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:31,620 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:31,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:31,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 625 transitions. [2018-11-14 19:18:31,627 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 625 transitions. Word has length 83 [2018-11-14 19:18:31,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:31,628 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 625 transitions. [2018-11-14 19:18:31,628 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:31,628 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 625 transitions. [2018-11-14 19:18:31,628 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 19:18:31,628 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:31,629 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:31,629 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:31,629 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:31,629 INFO L82 PathProgramCache]: Analyzing trace with hash -1716985057, now seen corresponding path program 1 times [2018-11-14 19:18:31,629 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:31,629 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:31,630 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:31,630 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:31,630 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:31,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:32,155 INFO L256 TraceCheckUtils]: 0: Hoare triple {38374#true} call ULTIMATE.init(); {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L273 TraceCheckUtils]: 1: Hoare triple {38374#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L273 TraceCheckUtils]: 2: Hoare triple {38374#true} assume true; {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {38374#true} {38374#true} #590#return; {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L256 TraceCheckUtils]: 4: Hoare triple {38374#true} call #t~ret138 := main(); {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L273 TraceCheckUtils]: 5: Hoare triple {38374#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L256 TraceCheckUtils]: 6: Hoare triple {38374#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {38374#true} is VALID [2018-11-14 19:18:32,156 INFO L273 TraceCheckUtils]: 7: Hoare triple {38374#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 8: Hoare triple {38374#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 9: Hoare triple {38374#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 10: Hoare triple {38374#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 11: Hoare triple {38374#true} assume true; {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 12: Hoare triple {38374#true} assume !false; {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 13: Hoare triple {38374#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 14: Hoare triple {38374#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,157 INFO L273 TraceCheckUtils]: 15: Hoare triple {38374#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 16: Hoare triple {38374#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 17: Hoare triple {38374#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 18: Hoare triple {38374#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 19: Hoare triple {38374#true} assume #t~mem27 == 4368;havoc #t~mem27; {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 20: Hoare triple {38374#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 21: Hoare triple {38374#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 22: Hoare triple {38374#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 23: Hoare triple {38374#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {38374#true} is VALID [2018-11-14 19:18:32,158 INFO L273 TraceCheckUtils]: 24: Hoare triple {38374#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 25: Hoare triple {38374#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 26: Hoare triple {38374#true} ~skip~0 := 0; {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 27: Hoare triple {38374#true} assume true; {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 28: Hoare triple {38374#true} assume !false; {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 29: Hoare triple {38374#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 30: Hoare triple {38374#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 31: Hoare triple {38374#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,159 INFO L273 TraceCheckUtils]: 32: Hoare triple {38374#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 33: Hoare triple {38374#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 34: Hoare triple {38374#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 35: Hoare triple {38374#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 36: Hoare triple {38374#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 37: Hoare triple {38374#true} assume #t~mem29 == 4384;havoc #t~mem29; {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 38: Hoare triple {38374#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 39: Hoare triple {38374#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {38374#true} is VALID [2018-11-14 19:18:32,160 INFO L273 TraceCheckUtils]: 40: Hoare triple {38374#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {38374#true} is VALID [2018-11-14 19:18:32,165 INFO L273 TraceCheckUtils]: 41: Hoare triple {38374#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,165 INFO L273 TraceCheckUtils]: 42: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, ~s.offset + 64, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,166 INFO L273 TraceCheckUtils]: 43: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,166 INFO L273 TraceCheckUtils]: 44: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,166 INFO L273 TraceCheckUtils]: 45: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,167 INFO L273 TraceCheckUtils]: 46: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume true; {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,167 INFO L273 TraceCheckUtils]: 47: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,168 INFO L273 TraceCheckUtils]: 48: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,168 INFO L273 TraceCheckUtils]: 49: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,169 INFO L273 TraceCheckUtils]: 50: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,169 INFO L273 TraceCheckUtils]: 51: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,170 INFO L273 TraceCheckUtils]: 52: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,170 INFO L273 TraceCheckUtils]: 53: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:32,171 INFO L273 TraceCheckUtils]: 54: Hoare triple {38376#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {38377#(= |ssl3_connect_#t~mem28| 4400)} is VALID [2018-11-14 19:18:32,172 INFO L273 TraceCheckUtils]: 55: Hoare triple {38377#(= |ssl3_connect_#t~mem28| 4400)} assume #t~mem28 == 4369;havoc #t~mem28; {38375#false} is VALID [2018-11-14 19:18:32,172 INFO L273 TraceCheckUtils]: 56: Hoare triple {38375#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {38375#false} is VALID [2018-11-14 19:18:32,172 INFO L273 TraceCheckUtils]: 57: Hoare triple {38375#false} assume !(~blastFlag~0 == 0); {38375#false} is VALID [2018-11-14 19:18:32,172 INFO L273 TraceCheckUtils]: 58: Hoare triple {38375#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {38375#false} is VALID [2018-11-14 19:18:32,172 INFO L273 TraceCheckUtils]: 59: Hoare triple {38375#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {38375#false} is VALID [2018-11-14 19:18:32,173 INFO L273 TraceCheckUtils]: 60: Hoare triple {38375#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {38375#false} is VALID [2018-11-14 19:18:32,173 INFO L273 TraceCheckUtils]: 61: Hoare triple {38375#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {38375#false} is VALID [2018-11-14 19:18:32,173 INFO L273 TraceCheckUtils]: 62: Hoare triple {38375#false} ~skip~0 := 0; {38375#false} is VALID [2018-11-14 19:18:32,173 INFO L273 TraceCheckUtils]: 63: Hoare triple {38375#false} assume true; {38375#false} is VALID [2018-11-14 19:18:32,174 INFO L273 TraceCheckUtils]: 64: Hoare triple {38375#false} assume !false; {38375#false} is VALID [2018-11-14 19:18:32,174 INFO L273 TraceCheckUtils]: 65: Hoare triple {38375#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,174 INFO L273 TraceCheckUtils]: 66: Hoare triple {38375#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,174 INFO L273 TraceCheckUtils]: 67: Hoare triple {38375#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,174 INFO L273 TraceCheckUtils]: 68: Hoare triple {38375#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,175 INFO L273 TraceCheckUtils]: 69: Hoare triple {38375#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,175 INFO L273 TraceCheckUtils]: 70: Hoare triple {38375#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,175 INFO L273 TraceCheckUtils]: 71: Hoare triple {38375#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,175 INFO L273 TraceCheckUtils]: 72: Hoare triple {38375#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,175 INFO L273 TraceCheckUtils]: 73: Hoare triple {38375#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,176 INFO L273 TraceCheckUtils]: 74: Hoare triple {38375#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,176 INFO L273 TraceCheckUtils]: 75: Hoare triple {38375#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,176 INFO L273 TraceCheckUtils]: 76: Hoare triple {38375#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,176 INFO L273 TraceCheckUtils]: 77: Hoare triple {38375#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,176 INFO L273 TraceCheckUtils]: 78: Hoare triple {38375#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {38375#false} is VALID [2018-11-14 19:18:32,176 INFO L273 TraceCheckUtils]: 79: Hoare triple {38375#false} assume #t~mem35 == 4432;havoc #t~mem35; {38375#false} is VALID [2018-11-14 19:18:32,177 INFO L273 TraceCheckUtils]: 80: Hoare triple {38375#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {38375#false} is VALID [2018-11-14 19:18:32,177 INFO L273 TraceCheckUtils]: 81: Hoare triple {38375#false} assume ~blastFlag~0 == 5; {38375#false} is VALID [2018-11-14 19:18:32,177 INFO L273 TraceCheckUtils]: 82: Hoare triple {38375#false} assume !false; {38375#false} is VALID [2018-11-14 19:18:32,182 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:32,182 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:32,183 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:32,183 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:32,183 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:32,183 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:32,259 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:32,259 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:32,259 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:32,259 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:32,260 INFO L87 Difference]: Start difference. First operand 428 states and 625 transitions. Second operand 4 states. [2018-11-14 19:18:35,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:35,109 INFO L93 Difference]: Finished difference Result 727 states and 1057 transitions. [2018-11-14 19:18:35,109 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:35,109 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-14 19:18:35,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:35,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:35,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 395 transitions. [2018-11-14 19:18:35,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:35,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 395 transitions. [2018-11-14 19:18:35,114 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 395 transitions. [2018-11-14 19:18:35,489 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 395 edges. 395 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:35,501 INFO L225 Difference]: With dead ends: 727 [2018-11-14 19:18:35,501 INFO L226 Difference]: Without dead ends: 464 [2018-11-14 19:18:35,502 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:35,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2018-11-14 19:18:35,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 428. [2018-11-14 19:18:35,717 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:35,717 INFO L82 GeneralOperation]: Start isEquivalent. First operand 464 states. Second operand 428 states. [2018-11-14 19:18:35,717 INFO L74 IsIncluded]: Start isIncluded. First operand 464 states. Second operand 428 states. [2018-11-14 19:18:35,717 INFO L87 Difference]: Start difference. First operand 464 states. Second operand 428 states. [2018-11-14 19:18:35,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:35,729 INFO L93 Difference]: Finished difference Result 464 states and 669 transitions. [2018-11-14 19:18:35,729 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 669 transitions. [2018-11-14 19:18:35,730 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:35,730 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:35,730 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 464 states. [2018-11-14 19:18:35,730 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 464 states. [2018-11-14 19:18:35,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:35,741 INFO L93 Difference]: Finished difference Result 464 states and 669 transitions. [2018-11-14 19:18:35,741 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 669 transitions. [2018-11-14 19:18:35,742 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:35,742 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:35,742 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:35,742 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:35,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:35,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 623 transitions. [2018-11-14 19:18:35,751 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 623 transitions. Word has length 83 [2018-11-14 19:18:35,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:35,751 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 623 transitions. [2018-11-14 19:18:35,751 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:35,751 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 623 transitions. [2018-11-14 19:18:35,752 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-14 19:18:35,752 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:35,752 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:35,752 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:35,752 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:35,753 INFO L82 PathProgramCache]: Analyzing trace with hash -369677777, now seen corresponding path program 1 times [2018-11-14 19:18:35,753 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:35,753 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:35,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:35,754 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:35,754 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:35,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:36,036 WARN L179 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-14 19:18:36,283 INFO L256 TraceCheckUtils]: 0: Hoare triple {40625#true} call ULTIMATE.init(); {40625#true} is VALID [2018-11-14 19:18:36,283 INFO L273 TraceCheckUtils]: 1: Hoare triple {40625#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {40625#true} is VALID [2018-11-14 19:18:36,284 INFO L273 TraceCheckUtils]: 2: Hoare triple {40625#true} assume true; {40625#true} is VALID [2018-11-14 19:18:36,284 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40625#true} {40625#true} #590#return; {40625#true} is VALID [2018-11-14 19:18:36,284 INFO L256 TraceCheckUtils]: 4: Hoare triple {40625#true} call #t~ret138 := main(); {40625#true} is VALID [2018-11-14 19:18:36,284 INFO L273 TraceCheckUtils]: 5: Hoare triple {40625#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {40625#true} is VALID [2018-11-14 19:18:36,284 INFO L256 TraceCheckUtils]: 6: Hoare triple {40625#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {40625#true} is VALID [2018-11-14 19:18:36,284 INFO L273 TraceCheckUtils]: 7: Hoare triple {40625#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 8: Hoare triple {40625#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 9: Hoare triple {40625#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 10: Hoare triple {40625#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 11: Hoare triple {40625#true} assume true; {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 12: Hoare triple {40625#true} assume !false; {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 13: Hoare triple {40625#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 14: Hoare triple {40625#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,285 INFO L273 TraceCheckUtils]: 15: Hoare triple {40625#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 16: Hoare triple {40625#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 17: Hoare triple {40625#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 18: Hoare triple {40625#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 19: Hoare triple {40625#true} assume #t~mem27 == 4368;havoc #t~mem27; {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 20: Hoare triple {40625#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 21: Hoare triple {40625#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 22: Hoare triple {40625#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 23: Hoare triple {40625#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {40625#true} is VALID [2018-11-14 19:18:36,286 INFO L273 TraceCheckUtils]: 24: Hoare triple {40625#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 25: Hoare triple {40625#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 26: Hoare triple {40625#true} ~skip~0 := 0; {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 27: Hoare triple {40625#true} assume true; {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 28: Hoare triple {40625#true} assume !false; {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 29: Hoare triple {40625#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 30: Hoare triple {40625#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 31: Hoare triple {40625#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,287 INFO L273 TraceCheckUtils]: 32: Hoare triple {40625#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 33: Hoare triple {40625#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 34: Hoare triple {40625#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 35: Hoare triple {40625#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 36: Hoare triple {40625#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 37: Hoare triple {40625#true} assume #t~mem29 == 4384;havoc #t~mem29; {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 38: Hoare triple {40625#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 39: Hoare triple {40625#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {40625#true} is VALID [2018-11-14 19:18:36,288 INFO L273 TraceCheckUtils]: 40: Hoare triple {40625#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {40625#true} is VALID [2018-11-14 19:18:36,289 INFO L273 TraceCheckUtils]: 41: Hoare triple {40625#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,290 INFO L273 TraceCheckUtils]: 42: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,290 INFO L273 TraceCheckUtils]: 43: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,291 INFO L273 TraceCheckUtils]: 44: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,291 INFO L273 TraceCheckUtils]: 45: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,291 INFO L273 TraceCheckUtils]: 46: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,292 INFO L273 TraceCheckUtils]: 47: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,292 INFO L273 TraceCheckUtils]: 48: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,293 INFO L273 TraceCheckUtils]: 49: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,293 INFO L273 TraceCheckUtils]: 50: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:36,294 INFO L273 TraceCheckUtils]: 51: Hoare triple {40627#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {40628#(= |ssl3_connect_#t~mem25| 4560)} is VALID [2018-11-14 19:18:36,295 INFO L273 TraceCheckUtils]: 52: Hoare triple {40628#(= |ssl3_connect_#t~mem25| 4560)} assume #t~mem25 == 20480;havoc #t~mem25; {40626#false} is VALID [2018-11-14 19:18:36,295 INFO L273 TraceCheckUtils]: 53: Hoare triple {40626#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {40626#false} is VALID [2018-11-14 19:18:36,295 INFO L273 TraceCheckUtils]: 54: Hoare triple {40626#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {40626#false} is VALID [2018-11-14 19:18:36,296 INFO L273 TraceCheckUtils]: 55: Hoare triple {40626#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {40626#false} is VALID [2018-11-14 19:18:36,296 INFO L273 TraceCheckUtils]: 56: Hoare triple {40626#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {40626#false} is VALID [2018-11-14 19:18:36,296 INFO L273 TraceCheckUtils]: 57: Hoare triple {40626#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {40626#false} is VALID [2018-11-14 19:18:36,296 INFO L273 TraceCheckUtils]: 58: Hoare triple {40626#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {40626#false} is VALID [2018-11-14 19:18:36,296 INFO L273 TraceCheckUtils]: 59: Hoare triple {40626#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {40626#false} is VALID [2018-11-14 19:18:36,297 INFO L273 TraceCheckUtils]: 60: Hoare triple {40626#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {40626#false} is VALID [2018-11-14 19:18:36,297 INFO L273 TraceCheckUtils]: 61: Hoare triple {40626#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {40626#false} is VALID [2018-11-14 19:18:36,297 INFO L273 TraceCheckUtils]: 62: Hoare triple {40626#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {40626#false} is VALID [2018-11-14 19:18:36,297 INFO L273 TraceCheckUtils]: 63: Hoare triple {40626#false} ~skip~0 := 0; {40626#false} is VALID [2018-11-14 19:18:36,297 INFO L273 TraceCheckUtils]: 64: Hoare triple {40626#false} assume true; {40626#false} is VALID [2018-11-14 19:18:36,297 INFO L273 TraceCheckUtils]: 65: Hoare triple {40626#false} assume !false; {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 66: Hoare triple {40626#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 67: Hoare triple {40626#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 68: Hoare triple {40626#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 69: Hoare triple {40626#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 70: Hoare triple {40626#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 71: Hoare triple {40626#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 72: Hoare triple {40626#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 73: Hoare triple {40626#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,298 INFO L273 TraceCheckUtils]: 74: Hoare triple {40626#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 75: Hoare triple {40626#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 76: Hoare triple {40626#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 77: Hoare triple {40626#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 78: Hoare triple {40626#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 79: Hoare triple {40626#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 80: Hoare triple {40626#false} assume #t~mem35 == 4432;havoc #t~mem35; {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 81: Hoare triple {40626#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {40626#false} is VALID [2018-11-14 19:18:36,299 INFO L273 TraceCheckUtils]: 82: Hoare triple {40626#false} assume ~blastFlag~0 == 5; {40626#false} is VALID [2018-11-14 19:18:36,300 INFO L273 TraceCheckUtils]: 83: Hoare triple {40626#false} assume !false; {40626#false} is VALID [2018-11-14 19:18:36,304 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:36,305 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:36,305 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:36,305 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-14 19:18:36,305 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:36,305 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:36,381 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:36,381 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:36,381 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:36,381 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:36,382 INFO L87 Difference]: Start difference. First operand 428 states and 623 transitions. Second operand 4 states. [2018-11-14 19:18:39,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:39,346 INFO L93 Difference]: Finished difference Result 951 states and 1382 transitions. [2018-11-14 19:18:39,346 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:39,346 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-14 19:18:39,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:39,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:39,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 459 transitions. [2018-11-14 19:18:39,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:39,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 459 transitions. [2018-11-14 19:18:39,350 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 459 transitions. [2018-11-14 19:18:39,798 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 459 edges. 459 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:39,815 INFO L225 Difference]: With dead ends: 951 [2018-11-14 19:18:39,815 INFO L226 Difference]: Without dead ends: 536 [2018-11-14 19:18:39,816 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:39,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2018-11-14 19:18:40,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 428. [2018-11-14 19:18:40,214 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:40,214 INFO L82 GeneralOperation]: Start isEquivalent. First operand 536 states. Second operand 428 states. [2018-11-14 19:18:40,214 INFO L74 IsIncluded]: Start isIncluded. First operand 536 states. Second operand 428 states. [2018-11-14 19:18:40,214 INFO L87 Difference]: Start difference. First operand 536 states. Second operand 428 states. [2018-11-14 19:18:40,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:40,228 INFO L93 Difference]: Finished difference Result 536 states and 774 transitions. [2018-11-14 19:18:40,229 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 774 transitions. [2018-11-14 19:18:40,229 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:40,229 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:40,229 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 536 states. [2018-11-14 19:18:40,229 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 536 states. [2018-11-14 19:18:40,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:40,243 INFO L93 Difference]: Finished difference Result 536 states and 774 transitions. [2018-11-14 19:18:40,243 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 774 transitions. [2018-11-14 19:18:40,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:40,244 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:40,244 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:40,244 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:40,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:40,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 621 transitions. [2018-11-14 19:18:40,253 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 621 transitions. Word has length 84 [2018-11-14 19:18:40,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:40,254 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 621 transitions. [2018-11-14 19:18:40,254 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:40,254 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 621 transitions. [2018-11-14 19:18:40,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-14 19:18:40,254 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:40,254 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:40,255 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:40,255 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:40,255 INFO L82 PathProgramCache]: Analyzing trace with hash -1267071055, now seen corresponding path program 1 times [2018-11-14 19:18:40,255 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:40,255 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:40,256 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:40,256 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:40,256 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:40,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:40,518 INFO L256 TraceCheckUtils]: 0: Hoare triple {43277#true} call ULTIMATE.init(); {43277#true} is VALID [2018-11-14 19:18:40,519 INFO L273 TraceCheckUtils]: 1: Hoare triple {43277#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {43277#true} is VALID [2018-11-14 19:18:40,519 INFO L273 TraceCheckUtils]: 2: Hoare triple {43277#true} assume true; {43277#true} is VALID [2018-11-14 19:18:40,519 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {43277#true} {43277#true} #590#return; {43277#true} is VALID [2018-11-14 19:18:40,519 INFO L256 TraceCheckUtils]: 4: Hoare triple {43277#true} call #t~ret138 := main(); {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L273 TraceCheckUtils]: 5: Hoare triple {43277#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L256 TraceCheckUtils]: 6: Hoare triple {43277#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L273 TraceCheckUtils]: 7: Hoare triple {43277#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L273 TraceCheckUtils]: 8: Hoare triple {43277#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L273 TraceCheckUtils]: 9: Hoare triple {43277#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L273 TraceCheckUtils]: 10: Hoare triple {43277#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {43277#true} is VALID [2018-11-14 19:18:40,520 INFO L273 TraceCheckUtils]: 11: Hoare triple {43277#true} assume true; {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 12: Hoare triple {43277#true} assume !false; {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 13: Hoare triple {43277#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 14: Hoare triple {43277#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 15: Hoare triple {43277#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 16: Hoare triple {43277#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 17: Hoare triple {43277#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 18: Hoare triple {43277#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,521 INFO L273 TraceCheckUtils]: 19: Hoare triple {43277#true} assume #t~mem27 == 4368;havoc #t~mem27; {43277#true} is VALID [2018-11-14 19:18:40,522 INFO L273 TraceCheckUtils]: 20: Hoare triple {43277#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {43277#true} is VALID [2018-11-14 19:18:40,522 INFO L273 TraceCheckUtils]: 21: Hoare triple {43277#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {43277#true} is VALID [2018-11-14 19:18:40,522 INFO L273 TraceCheckUtils]: 22: Hoare triple {43277#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {43277#true} is VALID [2018-11-14 19:18:40,522 INFO L273 TraceCheckUtils]: 23: Hoare triple {43277#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {43277#true} is VALID [2018-11-14 19:18:40,522 INFO L273 TraceCheckUtils]: 24: Hoare triple {43277#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {43277#true} is VALID [2018-11-14 19:18:40,522 INFO L273 TraceCheckUtils]: 25: Hoare triple {43277#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {43277#true} is VALID [2018-11-14 19:18:40,523 INFO L273 TraceCheckUtils]: 26: Hoare triple {43277#true} ~skip~0 := 0; {43277#true} is VALID [2018-11-14 19:18:40,523 INFO L273 TraceCheckUtils]: 27: Hoare triple {43277#true} assume true; {43277#true} is VALID [2018-11-14 19:18:40,523 INFO L273 TraceCheckUtils]: 28: Hoare triple {43277#true} assume !false; {43277#true} is VALID [2018-11-14 19:18:40,523 INFO L273 TraceCheckUtils]: 29: Hoare triple {43277#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,523 INFO L273 TraceCheckUtils]: 30: Hoare triple {43277#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,523 INFO L273 TraceCheckUtils]: 31: Hoare triple {43277#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,524 INFO L273 TraceCheckUtils]: 32: Hoare triple {43277#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,524 INFO L273 TraceCheckUtils]: 33: Hoare triple {43277#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,524 INFO L273 TraceCheckUtils]: 34: Hoare triple {43277#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,524 INFO L273 TraceCheckUtils]: 35: Hoare triple {43277#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,524 INFO L273 TraceCheckUtils]: 36: Hoare triple {43277#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {43277#true} is VALID [2018-11-14 19:18:40,524 INFO L273 TraceCheckUtils]: 37: Hoare triple {43277#true} assume #t~mem29 == 4384;havoc #t~mem29; {43277#true} is VALID [2018-11-14 19:18:40,525 INFO L273 TraceCheckUtils]: 38: Hoare triple {43277#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {43277#true} is VALID [2018-11-14 19:18:40,525 INFO L273 TraceCheckUtils]: 39: Hoare triple {43277#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {43277#true} is VALID [2018-11-14 19:18:40,525 INFO L273 TraceCheckUtils]: 40: Hoare triple {43277#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {43277#true} is VALID [2018-11-14 19:18:40,540 INFO L273 TraceCheckUtils]: 41: Hoare triple {43277#true} assume !(#t~mem68 != 0);havoc #t~mem68;call write~int(4400, ~s.base, ~s.offset + 52, 4); {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,541 INFO L273 TraceCheckUtils]: 42: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, ~s.offset + 64, 4); {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,542 INFO L273 TraceCheckUtils]: 43: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,542 INFO L273 TraceCheckUtils]: 44: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,542 INFO L273 TraceCheckUtils]: 45: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,543 INFO L273 TraceCheckUtils]: 46: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume true; {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,543 INFO L273 TraceCheckUtils]: 47: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,543 INFO L273 TraceCheckUtils]: 48: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,544 INFO L273 TraceCheckUtils]: 49: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,544 INFO L273 TraceCheckUtils]: 50: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-14 19:18:40,545 INFO L273 TraceCheckUtils]: 51: Hoare triple {43279#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {43280#(= |ssl3_connect_#t~mem25| 4400)} is VALID [2018-11-14 19:18:40,545 INFO L273 TraceCheckUtils]: 52: Hoare triple {43280#(= |ssl3_connect_#t~mem25| 4400)} assume #t~mem25 == 20480;havoc #t~mem25; {43278#false} is VALID [2018-11-14 19:18:40,545 INFO L273 TraceCheckUtils]: 53: Hoare triple {43278#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {43278#false} is VALID [2018-11-14 19:18:40,546 INFO L273 TraceCheckUtils]: 54: Hoare triple {43278#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {43278#false} is VALID [2018-11-14 19:18:40,546 INFO L273 TraceCheckUtils]: 55: Hoare triple {43278#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {43278#false} is VALID [2018-11-14 19:18:40,546 INFO L273 TraceCheckUtils]: 56: Hoare triple {43278#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {43278#false} is VALID [2018-11-14 19:18:40,546 INFO L273 TraceCheckUtils]: 57: Hoare triple {43278#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {43278#false} is VALID [2018-11-14 19:18:40,546 INFO L273 TraceCheckUtils]: 58: Hoare triple {43278#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {43278#false} is VALID [2018-11-14 19:18:40,547 INFO L273 TraceCheckUtils]: 59: Hoare triple {43278#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {43278#false} is VALID [2018-11-14 19:18:40,547 INFO L273 TraceCheckUtils]: 60: Hoare triple {43278#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {43278#false} is VALID [2018-11-14 19:18:40,547 INFO L273 TraceCheckUtils]: 61: Hoare triple {43278#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {43278#false} is VALID [2018-11-14 19:18:40,547 INFO L273 TraceCheckUtils]: 62: Hoare triple {43278#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {43278#false} is VALID [2018-11-14 19:18:40,547 INFO L273 TraceCheckUtils]: 63: Hoare triple {43278#false} ~skip~0 := 0; {43278#false} is VALID [2018-11-14 19:18:40,547 INFO L273 TraceCheckUtils]: 64: Hoare triple {43278#false} assume true; {43278#false} is VALID [2018-11-14 19:18:40,548 INFO L273 TraceCheckUtils]: 65: Hoare triple {43278#false} assume !false; {43278#false} is VALID [2018-11-14 19:18:40,548 INFO L273 TraceCheckUtils]: 66: Hoare triple {43278#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,548 INFO L273 TraceCheckUtils]: 67: Hoare triple {43278#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,548 INFO L273 TraceCheckUtils]: 68: Hoare triple {43278#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,548 INFO L273 TraceCheckUtils]: 69: Hoare triple {43278#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,549 INFO L273 TraceCheckUtils]: 70: Hoare triple {43278#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,549 INFO L273 TraceCheckUtils]: 71: Hoare triple {43278#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,549 INFO L273 TraceCheckUtils]: 72: Hoare triple {43278#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,549 INFO L273 TraceCheckUtils]: 73: Hoare triple {43278#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,549 INFO L273 TraceCheckUtils]: 74: Hoare triple {43278#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,550 INFO L273 TraceCheckUtils]: 75: Hoare triple {43278#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,550 INFO L273 TraceCheckUtils]: 76: Hoare triple {43278#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,550 INFO L273 TraceCheckUtils]: 77: Hoare triple {43278#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,550 INFO L273 TraceCheckUtils]: 78: Hoare triple {43278#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,550 INFO L273 TraceCheckUtils]: 79: Hoare triple {43278#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {43278#false} is VALID [2018-11-14 19:18:40,550 INFO L273 TraceCheckUtils]: 80: Hoare triple {43278#false} assume #t~mem35 == 4432;havoc #t~mem35; {43278#false} is VALID [2018-11-14 19:18:40,551 INFO L273 TraceCheckUtils]: 81: Hoare triple {43278#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {43278#false} is VALID [2018-11-14 19:18:40,551 INFO L273 TraceCheckUtils]: 82: Hoare triple {43278#false} assume ~blastFlag~0 == 5; {43278#false} is VALID [2018-11-14 19:18:40,551 INFO L273 TraceCheckUtils]: 83: Hoare triple {43278#false} assume !false; {43278#false} is VALID [2018-11-14 19:18:40,556 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:40,556 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:40,556 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:40,556 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-14 19:18:40,556 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:40,557 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:40,628 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:40,628 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:40,628 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:40,628 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:40,629 INFO L87 Difference]: Start difference. First operand 428 states and 621 transitions. Second operand 4 states. [2018-11-14 19:18:42,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:42,910 INFO L93 Difference]: Finished difference Result 879 states and 1271 transitions. [2018-11-14 19:18:42,910 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:18:42,910 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-14 19:18:42,910 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:18:42,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:42,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 394 transitions. [2018-11-14 19:18:42,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:18:42,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 394 transitions. [2018-11-14 19:18:42,914 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 394 transitions. [2018-11-14 19:18:43,292 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 394 edges. 394 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:43,305 INFO L225 Difference]: With dead ends: 879 [2018-11-14 19:18:43,305 INFO L226 Difference]: Without dead ends: 464 [2018-11-14 19:18:43,306 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:18:43,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2018-11-14 19:18:43,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 428. [2018-11-14 19:18:43,426 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:18:43,426 INFO L82 GeneralOperation]: Start isEquivalent. First operand 464 states. Second operand 428 states. [2018-11-14 19:18:43,426 INFO L74 IsIncluded]: Start isIncluded. First operand 464 states. Second operand 428 states. [2018-11-14 19:18:43,426 INFO L87 Difference]: Start difference. First operand 464 states. Second operand 428 states. [2018-11-14 19:18:43,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:43,438 INFO L93 Difference]: Finished difference Result 464 states and 665 transitions. [2018-11-14 19:18:43,438 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 665 transitions. [2018-11-14 19:18:43,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:43,439 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:43,439 INFO L74 IsIncluded]: Start isIncluded. First operand 428 states. Second operand 464 states. [2018-11-14 19:18:43,439 INFO L87 Difference]: Start difference. First operand 428 states. Second operand 464 states. [2018-11-14 19:18:43,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:18:43,451 INFO L93 Difference]: Finished difference Result 464 states and 665 transitions. [2018-11-14 19:18:43,451 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 665 transitions. [2018-11-14 19:18:43,451 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:18:43,451 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:18:43,451 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:18:43,451 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:18:43,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 428 states. [2018-11-14 19:18:43,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 619 transitions. [2018-11-14 19:18:43,461 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 619 transitions. Word has length 84 [2018-11-14 19:18:43,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:18:43,461 INFO L480 AbstractCegarLoop]: Abstraction has 428 states and 619 transitions. [2018-11-14 19:18:43,461 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:18:43,461 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 619 transitions. [2018-11-14 19:18:43,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-14 19:18:43,462 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:18:43,462 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:18:43,462 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:18:43,462 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:18:43,463 INFO L82 PathProgramCache]: Analyzing trace with hash 523421855, now seen corresponding path program 1 times [2018-11-14 19:18:43,463 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:18:43,463 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:18:43,464 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:43,464 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:18:43,464 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:18:43,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:18:43,720 INFO L256 TraceCheckUtils]: 0: Hoare triple {45697#true} call ULTIMATE.init(); {45697#true} is VALID [2018-11-14 19:18:43,721 INFO L273 TraceCheckUtils]: 1: Hoare triple {45697#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset + 96, 4); {45697#true} is VALID [2018-11-14 19:18:43,721 INFO L273 TraceCheckUtils]: 2: Hoare triple {45697#true} assume true; {45697#true} is VALID [2018-11-14 19:18:43,721 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {45697#true} {45697#true} #590#return; {45697#true} is VALID [2018-11-14 19:18:43,721 INFO L256 TraceCheckUtils]: 4: Hoare triple {45697#true} call #t~ret138 := main(); {45697#true} is VALID [2018-11-14 19:18:43,721 INFO L273 TraceCheckUtils]: 5: Hoare triple {45697#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call write~int(12292, ~s~0.base, ~s~0.offset + 52, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset + 0, 4);havoc #t~nondet6; {45697#true} is VALID [2018-11-14 19:18:43,722 INFO L256 TraceCheckUtils]: 6: Hoare triple {45697#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {45697#true} is VALID [2018-11-14 19:18:43,722 INFO L273 TraceCheckUtils]: 7: Hoare triple {45697#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, ~s.offset + 92, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {45697#true} is VALID [2018-11-14 19:18:43,722 INFO L273 TraceCheckUtils]: 8: Hoare triple {45697#true} assume (#t~mem14.base + #t~mem14.offset) % 4294967296 != 0;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {45697#true} is VALID [2018-11-14 19:18:43,722 INFO L273 TraceCheckUtils]: 9: Hoare triple {45697#true} call #t~mem20 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem20 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem20; {45697#true} is VALID [2018-11-14 19:18:43,722 INFO L273 TraceCheckUtils]: 10: Hoare triple {45697#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {45697#true} is VALID [2018-11-14 19:18:43,722 INFO L273 TraceCheckUtils]: 11: Hoare triple {45697#true} assume true; {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 12: Hoare triple {45697#true} assume !false; {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 13: Hoare triple {45697#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 14: Hoare triple {45697#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 15: Hoare triple {45697#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 16: Hoare triple {45697#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 17: Hoare triple {45697#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 18: Hoare triple {45697#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,723 INFO L273 TraceCheckUtils]: 19: Hoare triple {45697#true} assume #t~mem27 == 4368;havoc #t~mem27; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 20: Hoare triple {45697#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 21: Hoare triple {45697#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 22: Hoare triple {45697#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 20, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, ~s.offset + 16, 4); {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 23: Hoare triple {45697#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem65.base, #t~mem65.offset; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 24: Hoare triple {45697#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 25: Hoare triple {45697#true} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 26: Hoare triple {45697#true} ~skip~0 := 0; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 27: Hoare triple {45697#true} assume true; {45697#true} is VALID [2018-11-14 19:18:43,724 INFO L273 TraceCheckUtils]: 28: Hoare triple {45697#true} assume !false; {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 29: Hoare triple {45697#true} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 30: Hoare triple {45697#true} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 31: Hoare triple {45697#true} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 32: Hoare triple {45697#true} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 33: Hoare triple {45697#true} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 34: Hoare triple {45697#true} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 35: Hoare triple {45697#true} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,725 INFO L273 TraceCheckUtils]: 36: Hoare triple {45697#true} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {45697#true} is VALID [2018-11-14 19:18:43,726 INFO L273 TraceCheckUtils]: 37: Hoare triple {45697#true} assume #t~mem29 == 4384;havoc #t~mem29; {45697#true} is VALID [2018-11-14 19:18:43,726 INFO L273 TraceCheckUtils]: 38: Hoare triple {45697#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {45697#true} is VALID [2018-11-14 19:18:43,726 INFO L273 TraceCheckUtils]: 39: Hoare triple {45697#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {45697#true} is VALID [2018-11-14 19:18:43,726 INFO L273 TraceCheckUtils]: 40: Hoare triple {45697#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, ~s.offset + 92, 4); {45697#true} is VALID [2018-11-14 19:18:43,727 INFO L273 TraceCheckUtils]: 41: Hoare triple {45697#true} assume #t~mem68 != 0;havoc #t~mem68;call write~int(4560, ~s.base, ~s.offset + 52, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,727 INFO L273 TraceCheckUtils]: 42: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, ~s.offset + 64, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,728 INFO L273 TraceCheckUtils]: 43: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,728 INFO L273 TraceCheckUtils]: 44: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,728 INFO L273 TraceCheckUtils]: 45: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,729 INFO L273 TraceCheckUtils]: 46: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume true; {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,729 INFO L273 TraceCheckUtils]: 47: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,729 INFO L273 TraceCheckUtils]: 48: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,730 INFO L273 TraceCheckUtils]: 49: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,730 INFO L273 TraceCheckUtils]: 50: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,730 INFO L273 TraceCheckUtils]: 51: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-14 19:18:43,731 INFO L273 TraceCheckUtils]: 52: Hoare triple {45699#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {45700#(= |ssl3_connect_#t~mem26| 4560)} is VALID [2018-11-14 19:18:43,732 INFO L273 TraceCheckUtils]: 53: Hoare triple {45700#(= |ssl3_connect_#t~mem26| 4560)} assume #t~mem26 == 4099;havoc #t~mem26; {45698#false} is VALID [2018-11-14 19:18:43,732 INFO L273 TraceCheckUtils]: 54: Hoare triple {45698#false} call write~int(0, ~s.base, ~s.offset + 36, 4); {45698#false} is VALID [2018-11-14 19:18:43,732 INFO L273 TraceCheckUtils]: 55: Hoare triple {45698#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {45698#false} is VALID [2018-11-14 19:18:43,732 INFO L273 TraceCheckUtils]: 56: Hoare triple {45698#false} call #t~mem57 := read~int(~s.base, ~s.offset + 0, 4); {45698#false} is VALID [2018-11-14 19:18:43,733 INFO L273 TraceCheckUtils]: 57: Hoare triple {45698#false} assume !(~bitwiseAnd(#t~mem57, 65280) != 768);havoc #t~mem57;call write~int(4096, ~s.base, ~s.offset + 4, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {45698#false} is VALID [2018-11-14 19:18:43,733 INFO L273 TraceCheckUtils]: 58: Hoare triple {45698#false} assume !((#t~mem58.base + #t~mem58.offset) % 4294967296 == 0);havoc #t~mem58.base, #t~mem58.offset; {45698#false} is VALID [2018-11-14 19:18:43,733 INFO L273 TraceCheckUtils]: 59: Hoare triple {45698#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {45698#false} is VALID [2018-11-14 19:18:43,733 INFO L273 TraceCheckUtils]: 60: Hoare triple {45698#false} assume !(~tmp___4~0 == 0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {45698#false} is VALID [2018-11-14 19:18:43,733 INFO L273 TraceCheckUtils]: 61: Hoare triple {45698#false} assume !(~tmp___5~0 == 0);call write~int(4368, ~s.base, ~s.offset + 52, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem63 := read~int(#t~mem62.base, #t~mem62.offset + 60 + 0, 4);call write~int(#t~mem63 + 1, #t~mem62.base, #t~mem62.offset + 60 + 0, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, ~s.offset + 64, 4); {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 62: Hoare triple {45698#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 63: Hoare triple {45698#false} assume !(#t~mem128 == 0);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 64: Hoare triple {45698#false} ~skip~0 := 0; {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 65: Hoare triple {45698#false} assume true; {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 66: Hoare triple {45698#false} assume !false; {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 67: Hoare triple {45698#false} call #t~mem21 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,734 INFO L273 TraceCheckUtils]: 68: Hoare triple {45698#false} assume !(#t~mem22 == 12292);havoc #t~mem22;call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 69: Hoare triple {45698#false} assume !(#t~mem23 == 16384);havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 70: Hoare triple {45698#false} assume !(#t~mem24 == 4096);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 71: Hoare triple {45698#false} assume !(#t~mem25 == 20480);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 72: Hoare triple {45698#false} assume !(#t~mem26 == 4099);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 73: Hoare triple {45698#false} assume !(#t~mem27 == 4368);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 74: Hoare triple {45698#false} assume !(#t~mem28 == 4369);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 75: Hoare triple {45698#false} assume !(#t~mem29 == 4384);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,735 INFO L273 TraceCheckUtils]: 76: Hoare triple {45698#false} assume !(#t~mem30 == 4385);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 77: Hoare triple {45698#false} assume !(#t~mem31 == 4400);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 78: Hoare triple {45698#false} assume !(#t~mem32 == 4401);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 79: Hoare triple {45698#false} assume !(#t~mem33 == 4416);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 80: Hoare triple {45698#false} assume !(#t~mem34 == 4417);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 81: Hoare triple {45698#false} assume #t~mem35 == 4432;havoc #t~mem35; {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 82: Hoare triple {45698#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 83: Hoare triple {45698#false} assume ~blastFlag~0 == 5; {45698#false} is VALID [2018-11-14 19:18:43,736 INFO L273 TraceCheckUtils]: 84: Hoare triple {45698#false} assume !false; {45698#false} is VALID [2018-11-14 19:18:43,742 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-14 19:18:43,743 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:18:43,743 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:18:43,743 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-14 19:18:43,744 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:18:43,744 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:18:43,837 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:18:43,837 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:18:43,838 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:18:43,838 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:18:43,838 INFO L87 Difference]: Start difference. First operand 428 states and 619 transitions. Second operand 4 states.