java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default-Const.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.07_true-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-370d6ab [2018-11-14 19:08:07,964 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-14 19:08:07,966 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-14 19:08:07,982 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-14 19:08:07,982 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-14 19:08:07,984 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-14 19:08:07,986 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-14 19:08:07,988 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-14 19:08:07,991 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-14 19:08:07,993 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-14 19:08:07,996 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-14 19:08:07,996 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-14 19:08:07,998 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-14 19:08:07,999 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-14 19:08:08,000 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-14 19:08:08,001 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-14 19:08:08,003 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-14 19:08:08,006 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-14 19:08:08,008 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-14 19:08:08,010 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-14 19:08:08,011 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-14 19:08:08,012 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-14 19:08:08,015 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-14 19:08:08,015 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-14 19:08:08,015 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-14 19:08:08,016 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-14 19:08:08,017 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-14 19:08:08,018 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-14 19:08:08,019 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-14 19:08:08,020 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-14 19:08:08,020 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-14 19:08:08,021 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-14 19:08:08,021 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-14 19:08:08,021 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-14 19:08:08,023 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-14 19:08:08,023 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-14 19:08:08,024 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default-Const.epf [2018-11-14 19:08:08,043 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-14 19:08:08,043 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-14 19:08:08,044 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-14 19:08:08,044 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-14 19:08:08,045 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-14 19:08:08,045 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-14 19:08:08,046 INFO L133 SettingsManager]: * Use SBE=true [2018-11-14 19:08:08,046 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-14 19:08:08,046 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-14 19:08:08,046 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-14 19:08:08,046 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-14 19:08:08,047 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-14 19:08:08,047 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-14 19:08:08,047 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-14 19:08:08,047 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-14 19:08:08,047 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-14 19:08:08,048 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-14 19:08:08,048 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-14 19:08:08,048 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-14 19:08:08,048 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-14 19:08:08,049 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-14 19:08:08,049 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-14 19:08:08,049 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-14 19:08:08,049 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 19:08:08,049 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-14 19:08:08,050 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-14 19:08:08,050 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-14 19:08:08,050 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-14 19:08:08,050 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-14 19:08:08,050 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-14 19:08:08,051 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-14 19:08:08,115 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-14 19:08:08,132 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-14 19:08:08,137 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-14 19:08:08,138 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-14 19:08:08,139 INFO L276 PluginConnector]: CDTParser initialized [2018-11-14 19:08:08,140 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.07_true-unreach-call.i.cil.c [2018-11-14 19:08:08,218 INFO L218 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a73208d7/7465bc44a8ce4b0ca1afa9e8e88bbbfc/FLAGaaddae769 [2018-11-14 19:08:08,866 INFO L298 CDTParser]: Found 1 translation units. [2018-11-14 19:08:08,867 INFO L158 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.07_true-unreach-call.i.cil.c [2018-11-14 19:08:08,893 INFO L346 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a73208d7/7465bc44a8ce4b0ca1afa9e8e88bbbfc/FLAGaaddae769 [2018-11-14 19:08:08,914 INFO L354 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a73208d7/7465bc44a8ce4b0ca1afa9e8e88bbbfc [2018-11-14 19:08:08,928 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-14 19:08:08,930 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-14 19:08:08,931 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-14 19:08:08,932 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-14 19:08:08,938 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-14 19:08:08,940 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 07:08:08" (1/1) ... [2018-11-14 19:08:08,943 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@dcb5d08 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:08, skipping insertion in model container [2018-11-14 19:08:08,944 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 07:08:08" (1/1) ... [2018-11-14 19:08:08,955 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-14 19:08:09,059 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-14 19:08:09,975 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 19:08:10,092 INFO L191 MainTranslator]: Completed pre-run [2018-11-14 19:08:10,420 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-14 19:08:10,450 INFO L195 MainTranslator]: Completed translation [2018-11-14 19:08:10,451 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10 WrapperNode [2018-11-14 19:08:10,451 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-14 19:08:10,452 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-14 19:08:10,452 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-14 19:08:10,452 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-14 19:08:10,467 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,468 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,509 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,510 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,613 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,638 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,650 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... [2018-11-14 19:08:10,664 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-14 19:08:10,665 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-14 19:08:10,665 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-14 19:08:10,665 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-14 19:08:10,671 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-14 19:08:10,756 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-14 19:08:10,757 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-14 19:08:10,757 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_get_server_method [2018-11-14 19:08:10,757 INFO L138 BoogieDeclarations]: Found implementation of procedure SSLv3_server_method [2018-11-14 19:08:10,757 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-14 19:08:10,757 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-14 19:08:10,758 INFO L138 BoogieDeclarations]: Found implementation of procedure sslv3_base_method [2018-11-14 19:08:10,758 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-14 19:08:10,758 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-14 19:08:10,758 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-14 19:08:10,758 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-14 19:08:10,759 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2018-11-14 19:08:10,759 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-14 19:08:10,759 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2018-11-14 19:08:10,759 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-14 19:08:10,759 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-14 19:08:10,759 INFO L130 BoogieDeclarations]: Found specification of procedure SSLv3_server_method [2018-11-14 19:08:10,760 INFO L130 BoogieDeclarations]: Found specification of procedure sslv3_base_method [2018-11-14 19:08:10,760 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-14 19:08:10,760 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_get_server_method [2018-11-14 19:08:10,760 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-14 19:08:10,760 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-14 19:08:10,761 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-14 19:08:10,761 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-14 19:08:10,761 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-14 19:08:10,761 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-14 19:08:10,761 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-14 19:08:10,761 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-14 19:08:10,762 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-14 19:08:10,762 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-14 19:08:10,762 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-14 19:08:10,762 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-14 19:08:10,762 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-14 19:08:11,440 WARN L684 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-14 19:08:11,441 WARN L649 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-14 19:08:13,864 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-14 19:08:13,865 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 07:08:13 BoogieIcfgContainer [2018-11-14 19:08:13,865 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-14 19:08:13,866 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-14 19:08:13,866 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-14 19:08:13,870 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-14 19:08:13,870 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 07:08:08" (1/3) ... [2018-11-14 19:08:13,871 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@408f4605 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 07:08:13, skipping insertion in model container [2018-11-14 19:08:13,871 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 07:08:10" (2/3) ... [2018-11-14 19:08:13,871 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@408f4605 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 07:08:13, skipping insertion in model container [2018-11-14 19:08:13,872 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 07:08:13" (3/3) ... [2018-11-14 19:08:13,873 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.07_true-unreach-call.i.cil.c [2018-11-14 19:08:13,884 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-14 19:08:13,893 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-14 19:08:13,910 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-14 19:08:13,945 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-14 19:08:13,945 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-14 19:08:13,946 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-14 19:08:13,946 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-14 19:08:13,946 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-14 19:08:13,946 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-14 19:08:13,946 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-14 19:08:13,946 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-14 19:08:13,947 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-14 19:08:13,971 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states. [2018-11-14 19:08:13,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2018-11-14 19:08:13,981 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:13,982 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:13,985 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:13,991 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:13,992 INFO L82 PathProgramCache]: Analyzing trace with hash 1828609143, now seen corresponding path program 1 times [2018-11-14 19:08:13,994 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:13,995 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:14,046 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:14,046 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:14,046 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:14,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:14,655 INFO L256 TraceCheckUtils]: 0: Hoare triple {161#true} call ULTIMATE.init(); {161#true} is VALID [2018-11-14 19:08:14,660 INFO L273 TraceCheckUtils]: 1: Hoare triple {161#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {161#true} is VALID [2018-11-14 19:08:14,661 INFO L273 TraceCheckUtils]: 2: Hoare triple {161#true} assume true; {161#true} is VALID [2018-11-14 19:08:14,661 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {161#true} {161#true} #682#return; {161#true} is VALID [2018-11-14 19:08:14,662 INFO L256 TraceCheckUtils]: 4: Hoare triple {161#true} call #t~ret138 := main(); {161#true} is VALID [2018-11-14 19:08:14,662 INFO L273 TraceCheckUtils]: 5: Hoare triple {161#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {161#true} is VALID [2018-11-14 19:08:14,663 INFO L256 TraceCheckUtils]: 6: Hoare triple {161#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {161#true} is VALID [2018-11-14 19:08:14,675 INFO L273 TraceCheckUtils]: 7: Hoare triple {161#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,689 INFO L273 TraceCheckUtils]: 8: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,707 INFO L273 TraceCheckUtils]: 9: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,722 INFO L273 TraceCheckUtils]: 10: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,738 INFO L273 TraceCheckUtils]: 11: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,755 INFO L273 TraceCheckUtils]: 12: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,770 INFO L273 TraceCheckUtils]: 13: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume true; {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,784 INFO L273 TraceCheckUtils]: 14: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !false; {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,798 INFO L273 TraceCheckUtils]: 15: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,807 INFO L273 TraceCheckUtils]: 16: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,820 INFO L273 TraceCheckUtils]: 17: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,833 INFO L273 TraceCheckUtils]: 18: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,848 INFO L273 TraceCheckUtils]: 19: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,864 INFO L273 TraceCheckUtils]: 20: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,879 INFO L273 TraceCheckUtils]: 21: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,888 INFO L273 TraceCheckUtils]: 22: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:14,898 INFO L273 TraceCheckUtils]: 23: Hoare triple {163#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {164#(= 8464 |ssl3_accept_#t~mem32|)} is VALID [2018-11-14 19:08:14,911 INFO L273 TraceCheckUtils]: 24: Hoare triple {164#(= 8464 |ssl3_accept_#t~mem32|)} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,912 INFO L273 TraceCheckUtils]: 25: Hoare triple {162#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,912 INFO L273 TraceCheckUtils]: 26: Hoare triple {162#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,912 INFO L273 TraceCheckUtils]: 27: Hoare triple {162#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,913 INFO L273 TraceCheckUtils]: 28: Hoare triple {162#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,913 INFO L273 TraceCheckUtils]: 29: Hoare triple {162#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,914 INFO L273 TraceCheckUtils]: 30: Hoare triple {162#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,914 INFO L273 TraceCheckUtils]: 31: Hoare triple {162#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,914 INFO L273 TraceCheckUtils]: 32: Hoare triple {162#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {162#false} is VALID [2018-11-14 19:08:14,916 INFO L273 TraceCheckUtils]: 33: Hoare triple {162#false} assume #t~mem41 == 8544;havoc #t~mem41; {162#false} is VALID [2018-11-14 19:08:14,916 INFO L273 TraceCheckUtils]: 34: Hoare triple {162#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {162#false} is VALID [2018-11-14 19:08:14,916 INFO L273 TraceCheckUtils]: 35: Hoare triple {162#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {162#false} is VALID [2018-11-14 19:08:14,917 INFO L273 TraceCheckUtils]: 36: Hoare triple {162#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {162#false} is VALID [2018-11-14 19:08:14,917 INFO L273 TraceCheckUtils]: 37: Hoare triple {162#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {162#false} is VALID [2018-11-14 19:08:14,917 INFO L273 TraceCheckUtils]: 38: Hoare triple {162#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {162#false} is VALID [2018-11-14 19:08:14,918 INFO L273 TraceCheckUtils]: 39: Hoare triple {162#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {162#false} is VALID [2018-11-14 19:08:14,918 INFO L273 TraceCheckUtils]: 40: Hoare triple {162#false} assume ~blastFlag~0 == 8; {162#false} is VALID [2018-11-14 19:08:14,919 INFO L273 TraceCheckUtils]: 41: Hoare triple {162#false} assume !false; {162#false} is VALID [2018-11-14 19:08:14,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:14,943 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:14,943 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:14,954 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 42 [2018-11-14 19:08:14,958 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:14,965 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:15,136 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:15,137 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:15,144 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:15,145 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:15,147 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 4 states. [2018-11-14 19:08:17,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:17,635 INFO L93 Difference]: Finished difference Result 336 states and 561 transitions. [2018-11-14 19:08:17,635 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:17,635 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 42 [2018-11-14 19:08:17,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:17,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:17,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 561 transitions. [2018-11-14 19:08:17,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:17,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 561 transitions. [2018-11-14 19:08:17,674 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 561 transitions. [2018-11-14 19:08:18,716 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 561 edges. 561 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:18,744 INFO L225 Difference]: With dead ends: 336 [2018-11-14 19:08:18,744 INFO L226 Difference]: Without dead ends: 171 [2018-11-14 19:08:18,749 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:18,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2018-11-14 19:08:18,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 154. [2018-11-14 19:08:18,880 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:18,881 INFO L82 GeneralOperation]: Start isEquivalent. First operand 171 states. Second operand 154 states. [2018-11-14 19:08:18,881 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 154 states. [2018-11-14 19:08:18,881 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 154 states. [2018-11-14 19:08:18,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:18,898 INFO L93 Difference]: Finished difference Result 171 states and 255 transitions. [2018-11-14 19:08:18,898 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 255 transitions. [2018-11-14 19:08:18,901 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:18,901 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:18,902 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 171 states. [2018-11-14 19:08:18,902 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 171 states. [2018-11-14 19:08:18,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:18,916 INFO L93 Difference]: Finished difference Result 171 states and 255 transitions. [2018-11-14 19:08:18,916 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 255 transitions. [2018-11-14 19:08:18,918 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:18,918 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:18,918 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:18,919 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:18,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:18,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 234 transitions. [2018-11-14 19:08:18,931 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 234 transitions. Word has length 42 [2018-11-14 19:08:18,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:18,932 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 234 transitions. [2018-11-14 19:08:18,932 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:18,932 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 234 transitions. [2018-11-14 19:08:18,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-14 19:08:18,939 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:18,939 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:18,939 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:18,940 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:18,940 INFO L82 PathProgramCache]: Analyzing trace with hash 811074857, now seen corresponding path program 1 times [2018-11-14 19:08:18,940 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:18,940 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:18,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:18,943 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:18,943 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:19,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:19,261 INFO L256 TraceCheckUtils]: 0: Hoare triple {1096#true} call ULTIMATE.init(); {1096#true} is VALID [2018-11-14 19:08:19,262 INFO L273 TraceCheckUtils]: 1: Hoare triple {1096#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {1096#true} is VALID [2018-11-14 19:08:19,263 INFO L273 TraceCheckUtils]: 2: Hoare triple {1096#true} assume true; {1096#true} is VALID [2018-11-14 19:08:19,263 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1096#true} {1096#true} #682#return; {1096#true} is VALID [2018-11-14 19:08:19,264 INFO L256 TraceCheckUtils]: 4: Hoare triple {1096#true} call #t~ret138 := main(); {1096#true} is VALID [2018-11-14 19:08:19,264 INFO L273 TraceCheckUtils]: 5: Hoare triple {1096#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {1096#true} is VALID [2018-11-14 19:08:19,265 INFO L256 TraceCheckUtils]: 6: Hoare triple {1096#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1096#true} is VALID [2018-11-14 19:08:19,267 INFO L273 TraceCheckUtils]: 7: Hoare triple {1096#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,267 INFO L273 TraceCheckUtils]: 8: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,290 INFO L273 TraceCheckUtils]: 9: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,296 INFO L273 TraceCheckUtils]: 10: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,297 INFO L273 TraceCheckUtils]: 11: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,297 INFO L273 TraceCheckUtils]: 12: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,316 INFO L273 TraceCheckUtils]: 13: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,330 INFO L273 TraceCheckUtils]: 14: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,332 INFO L273 TraceCheckUtils]: 15: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,332 INFO L273 TraceCheckUtils]: 16: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,334 INFO L273 TraceCheckUtils]: 17: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,334 INFO L273 TraceCheckUtils]: 18: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,336 INFO L273 TraceCheckUtils]: 19: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:19,345 INFO L273 TraceCheckUtils]: 20: Hoare triple {1098#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {1099#(= |ssl3_accept_#t~mem29| 8464)} is VALID [2018-11-14 19:08:19,348 INFO L273 TraceCheckUtils]: 21: Hoare triple {1099#(= |ssl3_accept_#t~mem29| 8464)} assume #t~mem29 == 8480;havoc #t~mem29; {1097#false} is VALID [2018-11-14 19:08:19,348 INFO L273 TraceCheckUtils]: 22: Hoare triple {1097#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {1097#false} is VALID [2018-11-14 19:08:19,348 INFO L273 TraceCheckUtils]: 23: Hoare triple {1097#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(8482, #t~mem68.base, #t~mem68.offset + 604 + 240, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {1097#false} is VALID [2018-11-14 19:08:19,349 INFO L273 TraceCheckUtils]: 24: Hoare triple {1097#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {1097#false} is VALID [2018-11-14 19:08:19,349 INFO L273 TraceCheckUtils]: 25: Hoare triple {1097#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1097#false} is VALID [2018-11-14 19:08:19,349 INFO L273 TraceCheckUtils]: 26: Hoare triple {1097#false} ~skip~0 := 0; {1097#false} is VALID [2018-11-14 19:08:19,349 INFO L273 TraceCheckUtils]: 27: Hoare triple {1097#false} assume true; {1097#false} is VALID [2018-11-14 19:08:19,350 INFO L273 TraceCheckUtils]: 28: Hoare triple {1097#false} assume !false; {1097#false} is VALID [2018-11-14 19:08:19,350 INFO L273 TraceCheckUtils]: 29: Hoare triple {1097#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,350 INFO L273 TraceCheckUtils]: 30: Hoare triple {1097#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,350 INFO L273 TraceCheckUtils]: 31: Hoare triple {1097#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,351 INFO L273 TraceCheckUtils]: 32: Hoare triple {1097#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,351 INFO L273 TraceCheckUtils]: 33: Hoare triple {1097#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,351 INFO L273 TraceCheckUtils]: 34: Hoare triple {1097#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,352 INFO L273 TraceCheckUtils]: 35: Hoare triple {1097#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,352 INFO L273 TraceCheckUtils]: 36: Hoare triple {1097#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,352 INFO L273 TraceCheckUtils]: 37: Hoare triple {1097#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,352 INFO L273 TraceCheckUtils]: 38: Hoare triple {1097#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,353 INFO L273 TraceCheckUtils]: 39: Hoare triple {1097#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,353 INFO L273 TraceCheckUtils]: 40: Hoare triple {1097#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,353 INFO L273 TraceCheckUtils]: 41: Hoare triple {1097#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,353 INFO L273 TraceCheckUtils]: 42: Hoare triple {1097#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,354 INFO L273 TraceCheckUtils]: 43: Hoare triple {1097#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,354 INFO L273 TraceCheckUtils]: 44: Hoare triple {1097#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,354 INFO L273 TraceCheckUtils]: 45: Hoare triple {1097#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,354 INFO L273 TraceCheckUtils]: 46: Hoare triple {1097#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {1097#false} is VALID [2018-11-14 19:08:19,355 INFO L273 TraceCheckUtils]: 47: Hoare triple {1097#false} assume #t~mem41 == 8544;havoc #t~mem41; {1097#false} is VALID [2018-11-14 19:08:19,355 INFO L273 TraceCheckUtils]: 48: Hoare triple {1097#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {1097#false} is VALID [2018-11-14 19:08:19,355 INFO L273 TraceCheckUtils]: 49: Hoare triple {1097#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {1097#false} is VALID [2018-11-14 19:08:19,356 INFO L273 TraceCheckUtils]: 50: Hoare triple {1097#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {1097#false} is VALID [2018-11-14 19:08:19,356 INFO L273 TraceCheckUtils]: 51: Hoare triple {1097#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {1097#false} is VALID [2018-11-14 19:08:19,356 INFO L273 TraceCheckUtils]: 52: Hoare triple {1097#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {1097#false} is VALID [2018-11-14 19:08:19,356 INFO L273 TraceCheckUtils]: 53: Hoare triple {1097#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {1097#false} is VALID [2018-11-14 19:08:19,357 INFO L273 TraceCheckUtils]: 54: Hoare triple {1097#false} assume ~blastFlag~0 == 8; {1097#false} is VALID [2018-11-14 19:08:19,357 INFO L273 TraceCheckUtils]: 55: Hoare triple {1097#false} assume !false; {1097#false} is VALID [2018-11-14 19:08:19,366 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:19,366 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:19,367 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:19,368 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-14 19:08:19,369 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:19,369 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:19,452 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:19,452 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:19,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:19,453 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:19,453 INFO L87 Difference]: Start difference. First operand 154 states and 234 transitions. Second operand 4 states. [2018-11-14 19:08:21,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:21,321 INFO L93 Difference]: Finished difference Result 299 states and 452 transitions. [2018-11-14 19:08:21,321 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:21,322 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-14 19:08:21,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:21,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:21,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-14 19:08:21,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:21,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-14 19:08:21,338 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 452 transitions. [2018-11-14 19:08:21,994 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:22,002 INFO L225 Difference]: With dead ends: 299 [2018-11-14 19:08:22,002 INFO L226 Difference]: Without dead ends: 171 [2018-11-14 19:08:22,005 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:22,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2018-11-14 19:08:22,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 154. [2018-11-14 19:08:22,045 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:22,045 INFO L82 GeneralOperation]: Start isEquivalent. First operand 171 states. Second operand 154 states. [2018-11-14 19:08:22,045 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 154 states. [2018-11-14 19:08:22,045 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 154 states. [2018-11-14 19:08:22,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:22,057 INFO L93 Difference]: Finished difference Result 171 states and 254 transitions. [2018-11-14 19:08:22,057 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 254 transitions. [2018-11-14 19:08:22,058 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:22,059 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:22,059 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 171 states. [2018-11-14 19:08:22,059 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 171 states. [2018-11-14 19:08:22,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:22,077 INFO L93 Difference]: Finished difference Result 171 states and 254 transitions. [2018-11-14 19:08:22,077 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 254 transitions. [2018-11-14 19:08:22,080 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:22,081 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:22,081 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:22,081 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:22,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:22,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 233 transitions. [2018-11-14 19:08:22,093 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 233 transitions. Word has length 56 [2018-11-14 19:08:22,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:22,096 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 233 transitions. [2018-11-14 19:08:22,096 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:22,096 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 233 transitions. [2018-11-14 19:08:22,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-14 19:08:22,098 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:22,098 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:22,098 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:22,100 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:22,100 INFO L82 PathProgramCache]: Analyzing trace with hash 1227423003, now seen corresponding path program 1 times [2018-11-14 19:08:22,101 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:22,101 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:22,102 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:22,102 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:22,102 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:22,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:22,305 INFO L256 TraceCheckUtils]: 0: Hoare triple {1987#true} call ULTIMATE.init(); {1987#true} is VALID [2018-11-14 19:08:22,305 INFO L273 TraceCheckUtils]: 1: Hoare triple {1987#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {1987#true} is VALID [2018-11-14 19:08:22,306 INFO L273 TraceCheckUtils]: 2: Hoare triple {1987#true} assume true; {1987#true} is VALID [2018-11-14 19:08:22,306 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1987#true} {1987#true} #682#return; {1987#true} is VALID [2018-11-14 19:08:22,306 INFO L256 TraceCheckUtils]: 4: Hoare triple {1987#true} call #t~ret138 := main(); {1987#true} is VALID [2018-11-14 19:08:22,307 INFO L273 TraceCheckUtils]: 5: Hoare triple {1987#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {1987#true} is VALID [2018-11-14 19:08:22,307 INFO L256 TraceCheckUtils]: 6: Hoare triple {1987#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1987#true} is VALID [2018-11-14 19:08:22,309 INFO L273 TraceCheckUtils]: 7: Hoare triple {1987#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,315 INFO L273 TraceCheckUtils]: 8: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,316 INFO L273 TraceCheckUtils]: 9: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,317 INFO L273 TraceCheckUtils]: 10: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,317 INFO L273 TraceCheckUtils]: 11: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,317 INFO L273 TraceCheckUtils]: 12: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,318 INFO L273 TraceCheckUtils]: 13: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,318 INFO L273 TraceCheckUtils]: 14: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:22,319 INFO L273 TraceCheckUtils]: 15: Hoare triple {1989#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {1990#(= |ssl3_accept_#t~mem24| 8464)} is VALID [2018-11-14 19:08:22,320 INFO L273 TraceCheckUtils]: 16: Hoare triple {1990#(= |ssl3_accept_#t~mem24| 8464)} assume #t~mem24 == 12292;havoc #t~mem24; {1988#false} is VALID [2018-11-14 19:08:22,320 INFO L273 TraceCheckUtils]: 17: Hoare triple {1988#false} call write~int(1, ~s.base, ~s.offset + 40, 4); {1988#false} is VALID [2018-11-14 19:08:22,321 INFO L273 TraceCheckUtils]: 18: Hoare triple {1988#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {1988#false} is VALID [2018-11-14 19:08:22,321 INFO L273 TraceCheckUtils]: 19: Hoare triple {1988#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {1988#false} is VALID [2018-11-14 19:08:22,322 INFO L273 TraceCheckUtils]: 20: Hoare triple {1988#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {1988#false} is VALID [2018-11-14 19:08:22,322 INFO L273 TraceCheckUtils]: 21: Hoare triple {1988#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {1988#false} is VALID [2018-11-14 19:08:22,323 INFO L273 TraceCheckUtils]: 22: Hoare triple {1988#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {1988#false} is VALID [2018-11-14 19:08:22,323 INFO L273 TraceCheckUtils]: 23: Hoare triple {1988#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,323 INFO L273 TraceCheckUtils]: 24: Hoare triple {1988#false} assume !(#t~mem62 != 12292);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem66 := read~int(#t~mem65.base, #t~mem65.offset + 60 + 16, 4);call write~int(#t~mem66 + 1, #t~mem65.base, #t~mem65.offset + 60 + 16, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,324 INFO L273 TraceCheckUtils]: 25: Hoare triple {1988#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {1988#false} is VALID [2018-11-14 19:08:22,324 INFO L273 TraceCheckUtils]: 26: Hoare triple {1988#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1988#false} is VALID [2018-11-14 19:08:22,324 INFO L273 TraceCheckUtils]: 27: Hoare triple {1988#false} ~skip~0 := 0; {1988#false} is VALID [2018-11-14 19:08:22,324 INFO L273 TraceCheckUtils]: 28: Hoare triple {1988#false} assume true; {1988#false} is VALID [2018-11-14 19:08:22,325 INFO L273 TraceCheckUtils]: 29: Hoare triple {1988#false} assume !false; {1988#false} is VALID [2018-11-14 19:08:22,325 INFO L273 TraceCheckUtils]: 30: Hoare triple {1988#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,325 INFO L273 TraceCheckUtils]: 31: Hoare triple {1988#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,325 INFO L273 TraceCheckUtils]: 32: Hoare triple {1988#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,326 INFO L273 TraceCheckUtils]: 33: Hoare triple {1988#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,326 INFO L273 TraceCheckUtils]: 34: Hoare triple {1988#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,326 INFO L273 TraceCheckUtils]: 35: Hoare triple {1988#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,326 INFO L273 TraceCheckUtils]: 36: Hoare triple {1988#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,327 INFO L273 TraceCheckUtils]: 37: Hoare triple {1988#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,327 INFO L273 TraceCheckUtils]: 38: Hoare triple {1988#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,327 INFO L273 TraceCheckUtils]: 39: Hoare triple {1988#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,327 INFO L273 TraceCheckUtils]: 40: Hoare triple {1988#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,328 INFO L273 TraceCheckUtils]: 41: Hoare triple {1988#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,328 INFO L273 TraceCheckUtils]: 42: Hoare triple {1988#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,328 INFO L273 TraceCheckUtils]: 43: Hoare triple {1988#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,328 INFO L273 TraceCheckUtils]: 44: Hoare triple {1988#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,329 INFO L273 TraceCheckUtils]: 45: Hoare triple {1988#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,329 INFO L273 TraceCheckUtils]: 46: Hoare triple {1988#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,329 INFO L273 TraceCheckUtils]: 47: Hoare triple {1988#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {1988#false} is VALID [2018-11-14 19:08:22,329 INFO L273 TraceCheckUtils]: 48: Hoare triple {1988#false} assume #t~mem41 == 8544;havoc #t~mem41; {1988#false} is VALID [2018-11-14 19:08:22,330 INFO L273 TraceCheckUtils]: 49: Hoare triple {1988#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {1988#false} is VALID [2018-11-14 19:08:22,330 INFO L273 TraceCheckUtils]: 50: Hoare triple {1988#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {1988#false} is VALID [2018-11-14 19:08:22,330 INFO L273 TraceCheckUtils]: 51: Hoare triple {1988#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {1988#false} is VALID [2018-11-14 19:08:22,330 INFO L273 TraceCheckUtils]: 52: Hoare triple {1988#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {1988#false} is VALID [2018-11-14 19:08:22,331 INFO L273 TraceCheckUtils]: 53: Hoare triple {1988#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {1988#false} is VALID [2018-11-14 19:08:22,331 INFO L273 TraceCheckUtils]: 54: Hoare triple {1988#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {1988#false} is VALID [2018-11-14 19:08:22,331 INFO L273 TraceCheckUtils]: 55: Hoare triple {1988#false} assume ~blastFlag~0 == 8; {1988#false} is VALID [2018-11-14 19:08:22,331 INFO L273 TraceCheckUtils]: 56: Hoare triple {1988#false} assume !false; {1988#false} is VALID [2018-11-14 19:08:22,336 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:22,336 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:22,337 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:22,337 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:22,337 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:22,338 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:22,443 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:22,443 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:22,443 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:22,444 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:22,444 INFO L87 Difference]: Start difference. First operand 154 states and 233 transitions. Second operand 4 states. [2018-11-14 19:08:23,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:23,792 INFO L93 Difference]: Finished difference Result 298 states and 450 transitions. [2018-11-14 19:08:23,792 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:23,793 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:23,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:23,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:23,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-14 19:08:23,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:23,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-14 19:08:23,804 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 450 transitions. [2018-11-14 19:08:24,397 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 450 edges. 450 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:24,401 INFO L225 Difference]: With dead ends: 298 [2018-11-14 19:08:24,401 INFO L226 Difference]: Without dead ends: 170 [2018-11-14 19:08:24,402 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:24,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2018-11-14 19:08:24,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 154. [2018-11-14 19:08:24,752 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:24,752 INFO L82 GeneralOperation]: Start isEquivalent. First operand 170 states. Second operand 154 states. [2018-11-14 19:08:24,752 INFO L74 IsIncluded]: Start isIncluded. First operand 170 states. Second operand 154 states. [2018-11-14 19:08:24,753 INFO L87 Difference]: Start difference. First operand 170 states. Second operand 154 states. [2018-11-14 19:08:24,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:24,759 INFO L93 Difference]: Finished difference Result 170 states and 252 transitions. [2018-11-14 19:08:24,759 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 252 transitions. [2018-11-14 19:08:24,760 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:24,760 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:24,761 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 170 states. [2018-11-14 19:08:24,761 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 170 states. [2018-11-14 19:08:24,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:24,767 INFO L93 Difference]: Finished difference Result 170 states and 252 transitions. [2018-11-14 19:08:24,767 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 252 transitions. [2018-11-14 19:08:24,768 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:24,768 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:24,768 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:24,769 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:24,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:24,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 232 transitions. [2018-11-14 19:08:24,775 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 232 transitions. Word has length 57 [2018-11-14 19:08:24,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:24,775 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 232 transitions. [2018-11-14 19:08:24,775 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:24,776 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 232 transitions. [2018-11-14 19:08:24,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-14 19:08:24,777 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:24,777 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:24,778 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:24,778 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:24,778 INFO L82 PathProgramCache]: Analyzing trace with hash -2004394233, now seen corresponding path program 1 times [2018-11-14 19:08:24,778 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:24,778 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:24,779 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:24,780 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:24,780 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:24,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:25,022 INFO L256 TraceCheckUtils]: 0: Hoare triple {2874#true} call ULTIMATE.init(); {2874#true} is VALID [2018-11-14 19:08:25,022 INFO L273 TraceCheckUtils]: 1: Hoare triple {2874#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {2874#true} is VALID [2018-11-14 19:08:25,023 INFO L273 TraceCheckUtils]: 2: Hoare triple {2874#true} assume true; {2874#true} is VALID [2018-11-14 19:08:25,023 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2874#true} {2874#true} #682#return; {2874#true} is VALID [2018-11-14 19:08:25,023 INFO L256 TraceCheckUtils]: 4: Hoare triple {2874#true} call #t~ret138 := main(); {2874#true} is VALID [2018-11-14 19:08:25,023 INFO L273 TraceCheckUtils]: 5: Hoare triple {2874#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {2874#true} is VALID [2018-11-14 19:08:25,023 INFO L256 TraceCheckUtils]: 6: Hoare triple {2874#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {2874#true} is VALID [2018-11-14 19:08:25,026 INFO L273 TraceCheckUtils]: 7: Hoare triple {2874#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,027 INFO L273 TraceCheckUtils]: 8: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,027 INFO L273 TraceCheckUtils]: 9: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,028 INFO L273 TraceCheckUtils]: 10: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,028 INFO L273 TraceCheckUtils]: 11: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,029 INFO L273 TraceCheckUtils]: 12: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,030 INFO L273 TraceCheckUtils]: 13: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,030 INFO L273 TraceCheckUtils]: 14: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,031 INFO L273 TraceCheckUtils]: 15: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:25,032 INFO L273 TraceCheckUtils]: 16: Hoare triple {2876#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {2877#(= |ssl3_accept_#t~mem25| 8464)} is VALID [2018-11-14 19:08:25,033 INFO L273 TraceCheckUtils]: 17: Hoare triple {2877#(= |ssl3_accept_#t~mem25| 8464)} assume #t~mem25 == 16384;havoc #t~mem25; {2875#false} is VALID [2018-11-14 19:08:25,033 INFO L273 TraceCheckUtils]: 18: Hoare triple {2875#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {2875#false} is VALID [2018-11-14 19:08:25,034 INFO L273 TraceCheckUtils]: 19: Hoare triple {2875#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {2875#false} is VALID [2018-11-14 19:08:25,034 INFO L273 TraceCheckUtils]: 20: Hoare triple {2875#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {2875#false} is VALID [2018-11-14 19:08:25,034 INFO L273 TraceCheckUtils]: 21: Hoare triple {2875#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {2875#false} is VALID [2018-11-14 19:08:25,035 INFO L273 TraceCheckUtils]: 22: Hoare triple {2875#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {2875#false} is VALID [2018-11-14 19:08:25,035 INFO L273 TraceCheckUtils]: 23: Hoare triple {2875#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,035 INFO L273 TraceCheckUtils]: 24: Hoare triple {2875#false} assume !(#t~mem62 != 12292);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem66 := read~int(#t~mem65.base, #t~mem65.offset + 60 + 16, 4);call write~int(#t~mem66 + 1, #t~mem65.base, #t~mem65.offset + 60 + 16, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,036 INFO L273 TraceCheckUtils]: 25: Hoare triple {2875#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {2875#false} is VALID [2018-11-14 19:08:25,036 INFO L273 TraceCheckUtils]: 26: Hoare triple {2875#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {2875#false} is VALID [2018-11-14 19:08:25,036 INFO L273 TraceCheckUtils]: 27: Hoare triple {2875#false} ~skip~0 := 0; {2875#false} is VALID [2018-11-14 19:08:25,036 INFO L273 TraceCheckUtils]: 28: Hoare triple {2875#false} assume true; {2875#false} is VALID [2018-11-14 19:08:25,037 INFO L273 TraceCheckUtils]: 29: Hoare triple {2875#false} assume !false; {2875#false} is VALID [2018-11-14 19:08:25,037 INFO L273 TraceCheckUtils]: 30: Hoare triple {2875#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,037 INFO L273 TraceCheckUtils]: 31: Hoare triple {2875#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,037 INFO L273 TraceCheckUtils]: 32: Hoare triple {2875#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,038 INFO L273 TraceCheckUtils]: 33: Hoare triple {2875#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,038 INFO L273 TraceCheckUtils]: 34: Hoare triple {2875#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,038 INFO L273 TraceCheckUtils]: 35: Hoare triple {2875#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,038 INFO L273 TraceCheckUtils]: 36: Hoare triple {2875#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,039 INFO L273 TraceCheckUtils]: 37: Hoare triple {2875#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,039 INFO L273 TraceCheckUtils]: 38: Hoare triple {2875#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,039 INFO L273 TraceCheckUtils]: 39: Hoare triple {2875#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,039 INFO L273 TraceCheckUtils]: 40: Hoare triple {2875#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,039 INFO L273 TraceCheckUtils]: 41: Hoare triple {2875#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,040 INFO L273 TraceCheckUtils]: 42: Hoare triple {2875#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,040 INFO L273 TraceCheckUtils]: 43: Hoare triple {2875#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,040 INFO L273 TraceCheckUtils]: 44: Hoare triple {2875#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,040 INFO L273 TraceCheckUtils]: 45: Hoare triple {2875#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,041 INFO L273 TraceCheckUtils]: 46: Hoare triple {2875#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,041 INFO L273 TraceCheckUtils]: 47: Hoare triple {2875#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {2875#false} is VALID [2018-11-14 19:08:25,041 INFO L273 TraceCheckUtils]: 48: Hoare triple {2875#false} assume #t~mem41 == 8544;havoc #t~mem41; {2875#false} is VALID [2018-11-14 19:08:25,041 INFO L273 TraceCheckUtils]: 49: Hoare triple {2875#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {2875#false} is VALID [2018-11-14 19:08:25,042 INFO L273 TraceCheckUtils]: 50: Hoare triple {2875#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {2875#false} is VALID [2018-11-14 19:08:25,042 INFO L273 TraceCheckUtils]: 51: Hoare triple {2875#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {2875#false} is VALID [2018-11-14 19:08:25,042 INFO L273 TraceCheckUtils]: 52: Hoare triple {2875#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {2875#false} is VALID [2018-11-14 19:08:25,042 INFO L273 TraceCheckUtils]: 53: Hoare triple {2875#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {2875#false} is VALID [2018-11-14 19:08:25,043 INFO L273 TraceCheckUtils]: 54: Hoare triple {2875#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {2875#false} is VALID [2018-11-14 19:08:25,043 INFO L273 TraceCheckUtils]: 55: Hoare triple {2875#false} assume ~blastFlag~0 == 8; {2875#false} is VALID [2018-11-14 19:08:25,043 INFO L273 TraceCheckUtils]: 56: Hoare triple {2875#false} assume !false; {2875#false} is VALID [2018-11-14 19:08:25,048 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:25,048 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:25,048 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:25,048 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:25,049 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:25,049 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:25,116 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:25,116 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:25,117 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:25,117 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:25,117 INFO L87 Difference]: Start difference. First operand 154 states and 232 transitions. Second operand 4 states. [2018-11-14 19:08:26,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:26,777 INFO L93 Difference]: Finished difference Result 298 states and 449 transitions. [2018-11-14 19:08:26,777 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:26,778 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:26,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:26,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:26,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-14 19:08:26,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:26,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-14 19:08:26,789 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 449 transitions. [2018-11-14 19:08:27,281 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:27,288 INFO L225 Difference]: With dead ends: 298 [2018-11-14 19:08:27,288 INFO L226 Difference]: Without dead ends: 170 [2018-11-14 19:08:27,289 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:27,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2018-11-14 19:08:27,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 154. [2018-11-14 19:08:27,528 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:27,529 INFO L82 GeneralOperation]: Start isEquivalent. First operand 170 states. Second operand 154 states. [2018-11-14 19:08:27,529 INFO L74 IsIncluded]: Start isIncluded. First operand 170 states. Second operand 154 states. [2018-11-14 19:08:27,529 INFO L87 Difference]: Start difference. First operand 170 states. Second operand 154 states. [2018-11-14 19:08:27,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:27,537 INFO L93 Difference]: Finished difference Result 170 states and 251 transitions. [2018-11-14 19:08:27,537 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 251 transitions. [2018-11-14 19:08:27,538 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:27,538 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:27,538 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 170 states. [2018-11-14 19:08:27,538 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 170 states. [2018-11-14 19:08:27,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:27,544 INFO L93 Difference]: Finished difference Result 170 states and 251 transitions. [2018-11-14 19:08:27,544 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 251 transitions. [2018-11-14 19:08:27,545 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:27,545 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:27,545 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:27,545 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:27,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:27,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 231 transitions. [2018-11-14 19:08:27,550 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 231 transitions. Word has length 57 [2018-11-14 19:08:27,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:27,551 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 231 transitions. [2018-11-14 19:08:27,551 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:27,551 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 231 transitions. [2018-11-14 19:08:27,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-14 19:08:27,552 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:27,553 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:27,553 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:27,553 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:27,553 INFO L82 PathProgramCache]: Analyzing trace with hash -1368055952, now seen corresponding path program 1 times [2018-11-14 19:08:27,553 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:27,554 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:27,555 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:27,555 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:27,555 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:27,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:27,733 INFO L256 TraceCheckUtils]: 0: Hoare triple {3761#true} call ULTIMATE.init(); {3761#true} is VALID [2018-11-14 19:08:27,733 INFO L273 TraceCheckUtils]: 1: Hoare triple {3761#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {3761#true} is VALID [2018-11-14 19:08:27,734 INFO L273 TraceCheckUtils]: 2: Hoare triple {3761#true} assume true; {3761#true} is VALID [2018-11-14 19:08:27,734 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3761#true} {3761#true} #682#return; {3761#true} is VALID [2018-11-14 19:08:27,734 INFO L256 TraceCheckUtils]: 4: Hoare triple {3761#true} call #t~ret138 := main(); {3761#true} is VALID [2018-11-14 19:08:27,734 INFO L273 TraceCheckUtils]: 5: Hoare triple {3761#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {3761#true} is VALID [2018-11-14 19:08:27,735 INFO L256 TraceCheckUtils]: 6: Hoare triple {3761#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3761#true} is VALID [2018-11-14 19:08:27,737 INFO L273 TraceCheckUtils]: 7: Hoare triple {3761#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,737 INFO L273 TraceCheckUtils]: 8: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,741 INFO L273 TraceCheckUtils]: 9: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,742 INFO L273 TraceCheckUtils]: 10: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,742 INFO L273 TraceCheckUtils]: 11: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,743 INFO L273 TraceCheckUtils]: 12: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,743 INFO L273 TraceCheckUtils]: 13: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,743 INFO L273 TraceCheckUtils]: 14: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,744 INFO L273 TraceCheckUtils]: 15: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,745 INFO L273 TraceCheckUtils]: 16: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,745 INFO L273 TraceCheckUtils]: 17: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,746 INFO L273 TraceCheckUtils]: 18: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,747 INFO L273 TraceCheckUtils]: 19: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,748 INFO L273 TraceCheckUtils]: 20: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:27,750 INFO L273 TraceCheckUtils]: 21: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {3764#(= |ssl3_accept_#t~mem30| 8464)} is VALID [2018-11-14 19:08:27,750 INFO L273 TraceCheckUtils]: 22: Hoare triple {3764#(= |ssl3_accept_#t~mem30| 8464)} assume #t~mem30 == 8481;havoc #t~mem30; {3762#false} is VALID [2018-11-14 19:08:27,750 INFO L273 TraceCheckUtils]: 23: Hoare triple {3762#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {3762#false} is VALID [2018-11-14 19:08:27,751 INFO L273 TraceCheckUtils]: 24: Hoare triple {3762#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(8482, #t~mem68.base, #t~mem68.offset + 604 + 240, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {3762#false} is VALID [2018-11-14 19:08:27,751 INFO L273 TraceCheckUtils]: 25: Hoare triple {3762#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {3762#false} is VALID [2018-11-14 19:08:27,751 INFO L273 TraceCheckUtils]: 26: Hoare triple {3762#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {3762#false} is VALID [2018-11-14 19:08:27,751 INFO L273 TraceCheckUtils]: 27: Hoare triple {3762#false} ~skip~0 := 0; {3762#false} is VALID [2018-11-14 19:08:27,752 INFO L273 TraceCheckUtils]: 28: Hoare triple {3762#false} assume true; {3762#false} is VALID [2018-11-14 19:08:27,752 INFO L273 TraceCheckUtils]: 29: Hoare triple {3762#false} assume !false; {3762#false} is VALID [2018-11-14 19:08:27,752 INFO L273 TraceCheckUtils]: 30: Hoare triple {3762#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,752 INFO L273 TraceCheckUtils]: 31: Hoare triple {3762#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,753 INFO L273 TraceCheckUtils]: 32: Hoare triple {3762#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,753 INFO L273 TraceCheckUtils]: 33: Hoare triple {3762#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,753 INFO L273 TraceCheckUtils]: 34: Hoare triple {3762#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,754 INFO L273 TraceCheckUtils]: 35: Hoare triple {3762#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,754 INFO L273 TraceCheckUtils]: 36: Hoare triple {3762#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,754 INFO L273 TraceCheckUtils]: 37: Hoare triple {3762#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,754 INFO L273 TraceCheckUtils]: 38: Hoare triple {3762#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,755 INFO L273 TraceCheckUtils]: 39: Hoare triple {3762#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,755 INFO L273 TraceCheckUtils]: 40: Hoare triple {3762#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,755 INFO L273 TraceCheckUtils]: 41: Hoare triple {3762#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,755 INFO L273 TraceCheckUtils]: 42: Hoare triple {3762#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,756 INFO L273 TraceCheckUtils]: 43: Hoare triple {3762#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,756 INFO L273 TraceCheckUtils]: 44: Hoare triple {3762#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,756 INFO L273 TraceCheckUtils]: 45: Hoare triple {3762#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,757 INFO L273 TraceCheckUtils]: 46: Hoare triple {3762#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,757 INFO L273 TraceCheckUtils]: 47: Hoare triple {3762#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {3762#false} is VALID [2018-11-14 19:08:27,757 INFO L273 TraceCheckUtils]: 48: Hoare triple {3762#false} assume #t~mem41 == 8544;havoc #t~mem41; {3762#false} is VALID [2018-11-14 19:08:27,757 INFO L273 TraceCheckUtils]: 49: Hoare triple {3762#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {3762#false} is VALID [2018-11-14 19:08:27,758 INFO L273 TraceCheckUtils]: 50: Hoare triple {3762#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {3762#false} is VALID [2018-11-14 19:08:27,758 INFO L273 TraceCheckUtils]: 51: Hoare triple {3762#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {3762#false} is VALID [2018-11-14 19:08:27,758 INFO L273 TraceCheckUtils]: 52: Hoare triple {3762#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {3762#false} is VALID [2018-11-14 19:08:27,758 INFO L273 TraceCheckUtils]: 53: Hoare triple {3762#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {3762#false} is VALID [2018-11-14 19:08:27,759 INFO L273 TraceCheckUtils]: 54: Hoare triple {3762#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {3762#false} is VALID [2018-11-14 19:08:27,759 INFO L273 TraceCheckUtils]: 55: Hoare triple {3762#false} assume ~blastFlag~0 == 8; {3762#false} is VALID [2018-11-14 19:08:27,759 INFO L273 TraceCheckUtils]: 56: Hoare triple {3762#false} assume !false; {3762#false} is VALID [2018-11-14 19:08:27,766 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:27,766 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:27,766 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:27,767 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:27,767 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:27,767 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:27,842 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:27,843 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:27,843 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:27,843 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:27,844 INFO L87 Difference]: Start difference. First operand 154 states and 231 transitions. Second operand 4 states. [2018-11-14 19:08:29,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:29,487 INFO L93 Difference]: Finished difference Result 296 states and 446 transitions. [2018-11-14 19:08:29,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:29,487 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:29,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:29,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:29,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 446 transitions. [2018-11-14 19:08:29,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:29,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 446 transitions. [2018-11-14 19:08:29,496 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 446 transitions. [2018-11-14 19:08:30,056 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 446 edges. 446 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:30,060 INFO L225 Difference]: With dead ends: 296 [2018-11-14 19:08:30,060 INFO L226 Difference]: Without dead ends: 168 [2018-11-14 19:08:30,062 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:30,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2018-11-14 19:08:30,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 154. [2018-11-14 19:08:30,090 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:30,090 INFO L82 GeneralOperation]: Start isEquivalent. First operand 168 states. Second operand 154 states. [2018-11-14 19:08:30,090 INFO L74 IsIncluded]: Start isIncluded. First operand 168 states. Second operand 154 states. [2018-11-14 19:08:30,090 INFO L87 Difference]: Start difference. First operand 168 states. Second operand 154 states. [2018-11-14 19:08:30,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:30,095 INFO L93 Difference]: Finished difference Result 168 states and 248 transitions. [2018-11-14 19:08:30,095 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 248 transitions. [2018-11-14 19:08:30,096 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:30,096 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:30,096 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 168 states. [2018-11-14 19:08:30,096 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 168 states. [2018-11-14 19:08:30,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:30,101 INFO L93 Difference]: Finished difference Result 168 states and 248 transitions. [2018-11-14 19:08:30,101 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 248 transitions. [2018-11-14 19:08:30,102 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:30,102 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:30,102 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:30,102 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:30,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:30,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 230 transitions. [2018-11-14 19:08:30,106 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 230 transitions. Word has length 57 [2018-11-14 19:08:30,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:30,106 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 230 transitions. [2018-11-14 19:08:30,106 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:30,106 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 230 transitions. [2018-11-14 19:08:30,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-14 19:08:30,107 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:30,108 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:30,108 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:30,108 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:30,108 INFO L82 PathProgramCache]: Analyzing trace with hash -777923505, now seen corresponding path program 1 times [2018-11-14 19:08:30,108 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:30,109 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:30,110 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:30,110 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:30,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:30,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:30,652 INFO L256 TraceCheckUtils]: 0: Hoare triple {4641#true} call ULTIMATE.init(); {4641#true} is VALID [2018-11-14 19:08:30,652 INFO L273 TraceCheckUtils]: 1: Hoare triple {4641#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {4641#true} is VALID [2018-11-14 19:08:30,652 INFO L273 TraceCheckUtils]: 2: Hoare triple {4641#true} assume true; {4641#true} is VALID [2018-11-14 19:08:30,653 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4641#true} {4641#true} #682#return; {4641#true} is VALID [2018-11-14 19:08:30,653 INFO L256 TraceCheckUtils]: 4: Hoare triple {4641#true} call #t~ret138 := main(); {4641#true} is VALID [2018-11-14 19:08:30,653 INFO L273 TraceCheckUtils]: 5: Hoare triple {4641#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {4641#true} is VALID [2018-11-14 19:08:30,653 INFO L256 TraceCheckUtils]: 6: Hoare triple {4641#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {4641#true} is VALID [2018-11-14 19:08:30,655 INFO L273 TraceCheckUtils]: 7: Hoare triple {4641#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,656 INFO L273 TraceCheckUtils]: 8: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,657 INFO L273 TraceCheckUtils]: 9: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,657 INFO L273 TraceCheckUtils]: 10: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,659 INFO L273 TraceCheckUtils]: 11: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,660 INFO L273 TraceCheckUtils]: 12: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,661 INFO L273 TraceCheckUtils]: 13: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,661 INFO L273 TraceCheckUtils]: 14: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,662 INFO L273 TraceCheckUtils]: 15: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,663 INFO L273 TraceCheckUtils]: 16: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,663 INFO L273 TraceCheckUtils]: 17: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,664 INFO L273 TraceCheckUtils]: 18: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,665 INFO L273 TraceCheckUtils]: 19: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,665 INFO L273 TraceCheckUtils]: 20: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,666 INFO L273 TraceCheckUtils]: 21: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:30,667 INFO L273 TraceCheckUtils]: 22: Hoare triple {4643#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {4644#(= |ssl3_accept_#t~mem31| 8464)} is VALID [2018-11-14 19:08:30,667 INFO L273 TraceCheckUtils]: 23: Hoare triple {4644#(= |ssl3_accept_#t~mem31| 8464)} assume #t~mem31 == 8482;havoc #t~mem31; {4642#false} is VALID [2018-11-14 19:08:30,668 INFO L273 TraceCheckUtils]: 24: Hoare triple {4642#false} call write~int(3, ~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,668 INFO L273 TraceCheckUtils]: 25: Hoare triple {4642#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {4642#false} is VALID [2018-11-14 19:08:30,668 INFO L273 TraceCheckUtils]: 26: Hoare triple {4642#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {4642#false} is VALID [2018-11-14 19:08:30,669 INFO L273 TraceCheckUtils]: 27: Hoare triple {4642#false} ~skip~0 := 0; {4642#false} is VALID [2018-11-14 19:08:30,669 INFO L273 TraceCheckUtils]: 28: Hoare triple {4642#false} assume true; {4642#false} is VALID [2018-11-14 19:08:30,669 INFO L273 TraceCheckUtils]: 29: Hoare triple {4642#false} assume !false; {4642#false} is VALID [2018-11-14 19:08:30,670 INFO L273 TraceCheckUtils]: 30: Hoare triple {4642#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,670 INFO L273 TraceCheckUtils]: 31: Hoare triple {4642#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,670 INFO L273 TraceCheckUtils]: 32: Hoare triple {4642#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,671 INFO L273 TraceCheckUtils]: 33: Hoare triple {4642#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,671 INFO L273 TraceCheckUtils]: 34: Hoare triple {4642#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,671 INFO L273 TraceCheckUtils]: 35: Hoare triple {4642#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,672 INFO L273 TraceCheckUtils]: 36: Hoare triple {4642#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,672 INFO L273 TraceCheckUtils]: 37: Hoare triple {4642#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,672 INFO L273 TraceCheckUtils]: 38: Hoare triple {4642#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,672 INFO L273 TraceCheckUtils]: 39: Hoare triple {4642#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,672 INFO L273 TraceCheckUtils]: 40: Hoare triple {4642#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,673 INFO L273 TraceCheckUtils]: 41: Hoare triple {4642#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,673 INFO L273 TraceCheckUtils]: 42: Hoare triple {4642#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,673 INFO L273 TraceCheckUtils]: 43: Hoare triple {4642#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,673 INFO L273 TraceCheckUtils]: 44: Hoare triple {4642#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 45: Hoare triple {4642#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 46: Hoare triple {4642#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 47: Hoare triple {4642#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 48: Hoare triple {4642#false} assume #t~mem41 == 8544;havoc #t~mem41; {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 49: Hoare triple {4642#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 50: Hoare triple {4642#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {4642#false} is VALID [2018-11-14 19:08:30,674 INFO L273 TraceCheckUtils]: 51: Hoare triple {4642#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {4642#false} is VALID [2018-11-14 19:08:30,675 INFO L273 TraceCheckUtils]: 52: Hoare triple {4642#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {4642#false} is VALID [2018-11-14 19:08:30,675 INFO L273 TraceCheckUtils]: 53: Hoare triple {4642#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {4642#false} is VALID [2018-11-14 19:08:30,675 INFO L273 TraceCheckUtils]: 54: Hoare triple {4642#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {4642#false} is VALID [2018-11-14 19:08:30,675 INFO L273 TraceCheckUtils]: 55: Hoare triple {4642#false} assume ~blastFlag~0 == 8; {4642#false} is VALID [2018-11-14 19:08:30,675 INFO L273 TraceCheckUtils]: 56: Hoare triple {4642#false} assume !false; {4642#false} is VALID [2018-11-14 19:08:30,679 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:30,679 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:30,680 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:30,680 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:30,680 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:30,680 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:30,742 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:30,742 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:30,742 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:30,742 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:30,743 INFO L87 Difference]: Start difference. First operand 154 states and 230 transitions. Second operand 4 states. [2018-11-14 19:08:32,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:32,163 INFO L93 Difference]: Finished difference Result 295 states and 444 transitions. [2018-11-14 19:08:32,163 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:32,163 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-14 19:08:32,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:32,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:32,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-14 19:08:32,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:32,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-14 19:08:32,171 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 444 transitions. [2018-11-14 19:08:32,990 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:32,993 INFO L225 Difference]: With dead ends: 295 [2018-11-14 19:08:32,993 INFO L226 Difference]: Without dead ends: 167 [2018-11-14 19:08:32,994 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:32,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2018-11-14 19:08:33,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 154. [2018-11-14 19:08:33,013 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:33,013 INFO L82 GeneralOperation]: Start isEquivalent. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:33,013 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:33,014 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:33,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:33,018 INFO L93 Difference]: Finished difference Result 167 states and 246 transitions. [2018-11-14 19:08:33,019 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 246 transitions. [2018-11-14 19:08:33,019 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:33,019 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:33,019 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 167 states. [2018-11-14 19:08:33,020 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 167 states. [2018-11-14 19:08:33,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:33,024 INFO L93 Difference]: Finished difference Result 167 states and 246 transitions. [2018-11-14 19:08:33,024 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 246 transitions. [2018-11-14 19:08:33,024 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:33,025 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:33,025 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:33,025 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:33,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:33,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 229 transitions. [2018-11-14 19:08:33,029 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 229 transitions. Word has length 57 [2018-11-14 19:08:33,029 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:33,029 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 229 transitions. [2018-11-14 19:08:33,029 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:33,029 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 229 transitions. [2018-11-14 19:08:33,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-14 19:08:33,030 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:33,031 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:33,031 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:33,031 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:33,031 INFO L82 PathProgramCache]: Analyzing trace with hash 1390964448, now seen corresponding path program 1 times [2018-11-14 19:08:33,031 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:33,031 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:33,033 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:33,033 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:33,033 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:33,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:33,647 INFO L256 TraceCheckUtils]: 0: Hoare triple {5517#true} call ULTIMATE.init(); {5517#true} is VALID [2018-11-14 19:08:33,648 INFO L273 TraceCheckUtils]: 1: Hoare triple {5517#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {5517#true} is VALID [2018-11-14 19:08:33,648 INFO L273 TraceCheckUtils]: 2: Hoare triple {5517#true} assume true; {5517#true} is VALID [2018-11-14 19:08:33,648 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5517#true} {5517#true} #682#return; {5517#true} is VALID [2018-11-14 19:08:33,649 INFO L256 TraceCheckUtils]: 4: Hoare triple {5517#true} call #t~ret138 := main(); {5517#true} is VALID [2018-11-14 19:08:33,649 INFO L273 TraceCheckUtils]: 5: Hoare triple {5517#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {5517#true} is VALID [2018-11-14 19:08:33,649 INFO L256 TraceCheckUtils]: 6: Hoare triple {5517#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {5517#true} is VALID [2018-11-14 19:08:33,651 INFO L273 TraceCheckUtils]: 7: Hoare triple {5517#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,655 INFO L273 TraceCheckUtils]: 8: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,655 INFO L273 TraceCheckUtils]: 9: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,656 INFO L273 TraceCheckUtils]: 10: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,656 INFO L273 TraceCheckUtils]: 11: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,657 INFO L273 TraceCheckUtils]: 12: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,664 INFO L273 TraceCheckUtils]: 13: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,664 INFO L273 TraceCheckUtils]: 14: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,665 INFO L273 TraceCheckUtils]: 15: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,669 INFO L273 TraceCheckUtils]: 16: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:33,670 INFO L273 TraceCheckUtils]: 17: Hoare triple {5519#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {5520#(= |ssl3_accept_#t~mem26| 8464)} is VALID [2018-11-14 19:08:33,670 INFO L273 TraceCheckUtils]: 18: Hoare triple {5520#(= |ssl3_accept_#t~mem26| 8464)} assume #t~mem26 == 8192;havoc #t~mem26; {5518#false} is VALID [2018-11-14 19:08:33,670 INFO L273 TraceCheckUtils]: 19: Hoare triple {5518#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {5518#false} is VALID [2018-11-14 19:08:33,670 INFO L273 TraceCheckUtils]: 20: Hoare triple {5518#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 21: Hoare triple {5518#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 22: Hoare triple {5518#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 23: Hoare triple {5518#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 24: Hoare triple {5518#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 25: Hoare triple {5518#false} assume !(#t~mem62 != 12292);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem66 := read~int(#t~mem65.base, #t~mem65.offset + 60 + 16, 4);call write~int(#t~mem66 + 1, #t~mem65.base, #t~mem65.offset + 60 + 16, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 26: Hoare triple {5518#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {5518#false} is VALID [2018-11-14 19:08:33,671 INFO L273 TraceCheckUtils]: 27: Hoare triple {5518#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {5518#false} is VALID [2018-11-14 19:08:33,672 INFO L273 TraceCheckUtils]: 28: Hoare triple {5518#false} ~skip~0 := 0; {5518#false} is VALID [2018-11-14 19:08:33,672 INFO L273 TraceCheckUtils]: 29: Hoare triple {5518#false} assume true; {5518#false} is VALID [2018-11-14 19:08:33,672 INFO L273 TraceCheckUtils]: 30: Hoare triple {5518#false} assume !false; {5518#false} is VALID [2018-11-14 19:08:33,672 INFO L273 TraceCheckUtils]: 31: Hoare triple {5518#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,672 INFO L273 TraceCheckUtils]: 32: Hoare triple {5518#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,672 INFO L273 TraceCheckUtils]: 33: Hoare triple {5518#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,673 INFO L273 TraceCheckUtils]: 34: Hoare triple {5518#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,673 INFO L273 TraceCheckUtils]: 35: Hoare triple {5518#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,673 INFO L273 TraceCheckUtils]: 36: Hoare triple {5518#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,673 INFO L273 TraceCheckUtils]: 37: Hoare triple {5518#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,673 INFO L273 TraceCheckUtils]: 38: Hoare triple {5518#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,673 INFO L273 TraceCheckUtils]: 39: Hoare triple {5518#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,674 INFO L273 TraceCheckUtils]: 40: Hoare triple {5518#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,674 INFO L273 TraceCheckUtils]: 41: Hoare triple {5518#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,674 INFO L273 TraceCheckUtils]: 42: Hoare triple {5518#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,674 INFO L273 TraceCheckUtils]: 43: Hoare triple {5518#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,675 INFO L273 TraceCheckUtils]: 44: Hoare triple {5518#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,675 INFO L273 TraceCheckUtils]: 45: Hoare triple {5518#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,675 INFO L273 TraceCheckUtils]: 46: Hoare triple {5518#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,675 INFO L273 TraceCheckUtils]: 47: Hoare triple {5518#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,675 INFO L273 TraceCheckUtils]: 48: Hoare triple {5518#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {5518#false} is VALID [2018-11-14 19:08:33,676 INFO L273 TraceCheckUtils]: 49: Hoare triple {5518#false} assume #t~mem41 == 8544;havoc #t~mem41; {5518#false} is VALID [2018-11-14 19:08:33,676 INFO L273 TraceCheckUtils]: 50: Hoare triple {5518#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {5518#false} is VALID [2018-11-14 19:08:33,676 INFO L273 TraceCheckUtils]: 51: Hoare triple {5518#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {5518#false} is VALID [2018-11-14 19:08:33,676 INFO L273 TraceCheckUtils]: 52: Hoare triple {5518#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {5518#false} is VALID [2018-11-14 19:08:33,676 INFO L273 TraceCheckUtils]: 53: Hoare triple {5518#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {5518#false} is VALID [2018-11-14 19:08:33,677 INFO L273 TraceCheckUtils]: 54: Hoare triple {5518#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {5518#false} is VALID [2018-11-14 19:08:33,677 INFO L273 TraceCheckUtils]: 55: Hoare triple {5518#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {5518#false} is VALID [2018-11-14 19:08:33,677 INFO L273 TraceCheckUtils]: 56: Hoare triple {5518#false} assume ~blastFlag~0 == 8; {5518#false} is VALID [2018-11-14 19:08:33,677 INFO L273 TraceCheckUtils]: 57: Hoare triple {5518#false} assume !false; {5518#false} is VALID [2018-11-14 19:08:33,681 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:33,682 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:33,682 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:33,682 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-14 19:08:33,682 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:33,683 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:33,749 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:33,749 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:33,749 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:33,749 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:33,750 INFO L87 Difference]: Start difference. First operand 154 states and 229 transitions. Second operand 4 states. [2018-11-14 19:08:35,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:35,385 INFO L93 Difference]: Finished difference Result 295 states and 443 transitions. [2018-11-14 19:08:35,385 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:35,385 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-14 19:08:35,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:35,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:35,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-14 19:08:35,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:35,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-14 19:08:35,392 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 443 transitions. [2018-11-14 19:08:36,309 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 443 edges. 443 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:36,314 INFO L225 Difference]: With dead ends: 295 [2018-11-14 19:08:36,314 INFO L226 Difference]: Without dead ends: 167 [2018-11-14 19:08:36,315 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:36,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2018-11-14 19:08:36,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 154. [2018-11-14 19:08:36,338 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:36,338 INFO L82 GeneralOperation]: Start isEquivalent. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:36,338 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:36,338 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:36,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:36,342 INFO L93 Difference]: Finished difference Result 167 states and 245 transitions. [2018-11-14 19:08:36,342 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 245 transitions. [2018-11-14 19:08:36,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:36,342 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:36,343 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 167 states. [2018-11-14 19:08:36,343 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 167 states. [2018-11-14 19:08:36,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:36,347 INFO L93 Difference]: Finished difference Result 167 states and 245 transitions. [2018-11-14 19:08:36,347 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 245 transitions. [2018-11-14 19:08:36,347 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:36,348 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:36,348 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:36,348 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:36,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:36,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 228 transitions. [2018-11-14 19:08:36,351 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 228 transitions. Word has length 58 [2018-11-14 19:08:36,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:36,352 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 228 transitions. [2018-11-14 19:08:36,352 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:36,352 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 228 transitions. [2018-11-14 19:08:36,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-14 19:08:36,353 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:36,353 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:36,353 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:36,353 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:36,354 INFO L82 PathProgramCache]: Analyzing trace with hash -2009133438, now seen corresponding path program 1 times [2018-11-14 19:08:36,354 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:36,354 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:36,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:36,355 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:36,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:36,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:37,119 INFO L256 TraceCheckUtils]: 0: Hoare triple {6393#true} call ULTIMATE.init(); {6393#true} is VALID [2018-11-14 19:08:37,120 INFO L273 TraceCheckUtils]: 1: Hoare triple {6393#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {6393#true} is VALID [2018-11-14 19:08:37,120 INFO L273 TraceCheckUtils]: 2: Hoare triple {6393#true} assume true; {6393#true} is VALID [2018-11-14 19:08:37,120 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6393#true} {6393#true} #682#return; {6393#true} is VALID [2018-11-14 19:08:37,120 INFO L256 TraceCheckUtils]: 4: Hoare triple {6393#true} call #t~ret138 := main(); {6393#true} is VALID [2018-11-14 19:08:37,121 INFO L273 TraceCheckUtils]: 5: Hoare triple {6393#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {6393#true} is VALID [2018-11-14 19:08:37,121 INFO L256 TraceCheckUtils]: 6: Hoare triple {6393#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6393#true} is VALID [2018-11-14 19:08:37,140 INFO L273 TraceCheckUtils]: 7: Hoare triple {6393#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,149 INFO L273 TraceCheckUtils]: 8: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,162 INFO L273 TraceCheckUtils]: 9: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,180 INFO L273 TraceCheckUtils]: 10: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,180 INFO L273 TraceCheckUtils]: 11: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,184 INFO L273 TraceCheckUtils]: 12: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,184 INFO L273 TraceCheckUtils]: 13: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,186 INFO L273 TraceCheckUtils]: 14: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,186 INFO L273 TraceCheckUtils]: 15: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,188 INFO L273 TraceCheckUtils]: 16: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,188 INFO L273 TraceCheckUtils]: 17: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:37,189 INFO L273 TraceCheckUtils]: 18: Hoare triple {6395#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {6396#(= |ssl3_accept_#t~mem27| 8464)} is VALID [2018-11-14 19:08:37,189 INFO L273 TraceCheckUtils]: 19: Hoare triple {6396#(= |ssl3_accept_#t~mem27| 8464)} assume #t~mem27 == 24576;havoc #t~mem27; {6394#false} is VALID [2018-11-14 19:08:37,189 INFO L273 TraceCheckUtils]: 20: Hoare triple {6394#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {6394#false} is VALID [2018-11-14 19:08:37,189 INFO L273 TraceCheckUtils]: 21: Hoare triple {6394#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {6394#false} is VALID [2018-11-14 19:08:37,189 INFO L273 TraceCheckUtils]: 22: Hoare triple {6394#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {6394#false} is VALID [2018-11-14 19:08:37,190 INFO L273 TraceCheckUtils]: 23: Hoare triple {6394#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {6394#false} is VALID [2018-11-14 19:08:37,190 INFO L273 TraceCheckUtils]: 24: Hoare triple {6394#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {6394#false} is VALID [2018-11-14 19:08:37,190 INFO L273 TraceCheckUtils]: 25: Hoare triple {6394#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,190 INFO L273 TraceCheckUtils]: 26: Hoare triple {6394#false} assume !(#t~mem62 != 12292);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem66 := read~int(#t~mem65.base, #t~mem65.offset + 60 + 16, 4);call write~int(#t~mem66 + 1, #t~mem65.base, #t~mem65.offset + 60 + 16, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,190 INFO L273 TraceCheckUtils]: 27: Hoare triple {6394#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {6394#false} is VALID [2018-11-14 19:08:37,190 INFO L273 TraceCheckUtils]: 28: Hoare triple {6394#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 29: Hoare triple {6394#false} ~skip~0 := 0; {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 30: Hoare triple {6394#false} assume true; {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 31: Hoare triple {6394#false} assume !false; {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 32: Hoare triple {6394#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 33: Hoare triple {6394#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 34: Hoare triple {6394#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,191 INFO L273 TraceCheckUtils]: 35: Hoare triple {6394#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 36: Hoare triple {6394#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 37: Hoare triple {6394#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 38: Hoare triple {6394#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 39: Hoare triple {6394#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 40: Hoare triple {6394#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 41: Hoare triple {6394#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,192 INFO L273 TraceCheckUtils]: 42: Hoare triple {6394#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,193 INFO L273 TraceCheckUtils]: 43: Hoare triple {6394#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,193 INFO L273 TraceCheckUtils]: 44: Hoare triple {6394#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,193 INFO L273 TraceCheckUtils]: 45: Hoare triple {6394#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,193 INFO L273 TraceCheckUtils]: 46: Hoare triple {6394#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,193 INFO L273 TraceCheckUtils]: 47: Hoare triple {6394#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,194 INFO L273 TraceCheckUtils]: 48: Hoare triple {6394#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,194 INFO L273 TraceCheckUtils]: 49: Hoare triple {6394#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {6394#false} is VALID [2018-11-14 19:08:37,194 INFO L273 TraceCheckUtils]: 50: Hoare triple {6394#false} assume #t~mem41 == 8544;havoc #t~mem41; {6394#false} is VALID [2018-11-14 19:08:37,194 INFO L273 TraceCheckUtils]: 51: Hoare triple {6394#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {6394#false} is VALID [2018-11-14 19:08:37,195 INFO L273 TraceCheckUtils]: 52: Hoare triple {6394#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {6394#false} is VALID [2018-11-14 19:08:37,195 INFO L273 TraceCheckUtils]: 53: Hoare triple {6394#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {6394#false} is VALID [2018-11-14 19:08:37,195 INFO L273 TraceCheckUtils]: 54: Hoare triple {6394#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {6394#false} is VALID [2018-11-14 19:08:37,195 INFO L273 TraceCheckUtils]: 55: Hoare triple {6394#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {6394#false} is VALID [2018-11-14 19:08:37,195 INFO L273 TraceCheckUtils]: 56: Hoare triple {6394#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {6394#false} is VALID [2018-11-14 19:08:37,196 INFO L273 TraceCheckUtils]: 57: Hoare triple {6394#false} assume ~blastFlag~0 == 8; {6394#false} is VALID [2018-11-14 19:08:37,196 INFO L273 TraceCheckUtils]: 58: Hoare triple {6394#false} assume !false; {6394#false} is VALID [2018-11-14 19:08:37,200 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:37,201 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:37,201 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:37,201 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-14 19:08:37,201 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:37,202 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:37,275 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:37,275 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:37,276 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:37,276 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:37,276 INFO L87 Difference]: Start difference. First operand 154 states and 228 transitions. Second operand 4 states. [2018-11-14 19:08:39,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:39,164 INFO L93 Difference]: Finished difference Result 295 states and 442 transitions. [2018-11-14 19:08:39,164 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:39,165 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-14 19:08:39,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:39,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:39,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 442 transitions. [2018-11-14 19:08:39,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:39,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 442 transitions. [2018-11-14 19:08:39,171 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 442 transitions. [2018-11-14 19:08:39,960 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 442 edges. 442 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:39,964 INFO L225 Difference]: With dead ends: 295 [2018-11-14 19:08:39,964 INFO L226 Difference]: Without dead ends: 167 [2018-11-14 19:08:39,965 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:39,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2018-11-14 19:08:40,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 154. [2018-11-14 19:08:40,028 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:40,029 INFO L82 GeneralOperation]: Start isEquivalent. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:40,029 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:40,029 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 154 states. [2018-11-14 19:08:40,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:40,033 INFO L93 Difference]: Finished difference Result 167 states and 244 transitions. [2018-11-14 19:08:40,033 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 244 transitions. [2018-11-14 19:08:40,033 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:40,033 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:40,034 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 167 states. [2018-11-14 19:08:40,034 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 167 states. [2018-11-14 19:08:40,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:40,038 INFO L93 Difference]: Finished difference Result 167 states and 244 transitions. [2018-11-14 19:08:40,038 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 244 transitions. [2018-11-14 19:08:40,039 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:40,039 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:40,039 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:40,039 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:40,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:40,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 227 transitions. [2018-11-14 19:08:40,043 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 227 transitions. Word has length 59 [2018-11-14 19:08:40,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:40,044 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 227 transitions. [2018-11-14 19:08:40,044 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:40,044 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 227 transitions. [2018-11-14 19:08:40,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-14 19:08:40,045 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:40,045 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:40,045 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:40,046 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:40,046 INFO L82 PathProgramCache]: Analyzing trace with hash -1320020101, now seen corresponding path program 1 times [2018-11-14 19:08:40,046 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:40,046 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:40,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:40,048 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:40,048 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:40,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:40,803 INFO L256 TraceCheckUtils]: 0: Hoare triple {7269#true} call ULTIMATE.init(); {7269#true} is VALID [2018-11-14 19:08:40,803 INFO L273 TraceCheckUtils]: 1: Hoare triple {7269#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {7269#true} is VALID [2018-11-14 19:08:40,803 INFO L273 TraceCheckUtils]: 2: Hoare triple {7269#true} assume true; {7269#true} is VALID [2018-11-14 19:08:40,804 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7269#true} {7269#true} #682#return; {7269#true} is VALID [2018-11-14 19:08:40,804 INFO L256 TraceCheckUtils]: 4: Hoare triple {7269#true} call #t~ret138 := main(); {7269#true} is VALID [2018-11-14 19:08:40,804 INFO L273 TraceCheckUtils]: 5: Hoare triple {7269#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {7269#true} is VALID [2018-11-14 19:08:40,804 INFO L256 TraceCheckUtils]: 6: Hoare triple {7269#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7269#true} is VALID [2018-11-14 19:08:40,808 INFO L273 TraceCheckUtils]: 7: Hoare triple {7269#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,808 INFO L273 TraceCheckUtils]: 8: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,809 INFO L273 TraceCheckUtils]: 9: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,809 INFO L273 TraceCheckUtils]: 10: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,810 INFO L273 TraceCheckUtils]: 11: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,810 INFO L273 TraceCheckUtils]: 12: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,811 INFO L273 TraceCheckUtils]: 13: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,811 INFO L273 TraceCheckUtils]: 14: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,812 INFO L273 TraceCheckUtils]: 15: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,812 INFO L273 TraceCheckUtils]: 16: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,813 INFO L273 TraceCheckUtils]: 17: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,814 INFO L273 TraceCheckUtils]: 18: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-14 19:08:40,815 INFO L273 TraceCheckUtils]: 19: Hoare triple {7271#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {7272#(= |ssl3_accept_#t~mem28| 8464)} is VALID [2018-11-14 19:08:40,815 INFO L273 TraceCheckUtils]: 20: Hoare triple {7272#(= |ssl3_accept_#t~mem28| 8464)} assume #t~mem28 == 8195;havoc #t~mem28; {7270#false} is VALID [2018-11-14 19:08:40,816 INFO L273 TraceCheckUtils]: 21: Hoare triple {7270#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {7270#false} is VALID [2018-11-14 19:08:40,816 INFO L273 TraceCheckUtils]: 22: Hoare triple {7270#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {7270#false} is VALID [2018-11-14 19:08:40,816 INFO L273 TraceCheckUtils]: 23: Hoare triple {7270#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {7270#false} is VALID [2018-11-14 19:08:40,817 INFO L273 TraceCheckUtils]: 24: Hoare triple {7270#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {7270#false} is VALID [2018-11-14 19:08:40,817 INFO L273 TraceCheckUtils]: 25: Hoare triple {7270#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {7270#false} is VALID [2018-11-14 19:08:40,817 INFO L273 TraceCheckUtils]: 26: Hoare triple {7270#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,817 INFO L273 TraceCheckUtils]: 27: Hoare triple {7270#false} assume !(#t~mem62 != 12292);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem66 := read~int(#t~mem65.base, #t~mem65.offset + 60 + 16, 4);call write~int(#t~mem66 + 1, #t~mem65.base, #t~mem65.offset + 60 + 16, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,818 INFO L273 TraceCheckUtils]: 28: Hoare triple {7270#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {7270#false} is VALID [2018-11-14 19:08:40,818 INFO L273 TraceCheckUtils]: 29: Hoare triple {7270#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7270#false} is VALID [2018-11-14 19:08:40,818 INFO L273 TraceCheckUtils]: 30: Hoare triple {7270#false} ~skip~0 := 0; {7270#false} is VALID [2018-11-14 19:08:40,818 INFO L273 TraceCheckUtils]: 31: Hoare triple {7270#false} assume true; {7270#false} is VALID [2018-11-14 19:08:40,819 INFO L273 TraceCheckUtils]: 32: Hoare triple {7270#false} assume !false; {7270#false} is VALID [2018-11-14 19:08:40,819 INFO L273 TraceCheckUtils]: 33: Hoare triple {7270#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,819 INFO L273 TraceCheckUtils]: 34: Hoare triple {7270#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,820 INFO L273 TraceCheckUtils]: 35: Hoare triple {7270#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,820 INFO L273 TraceCheckUtils]: 36: Hoare triple {7270#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,820 INFO L273 TraceCheckUtils]: 37: Hoare triple {7270#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,820 INFO L273 TraceCheckUtils]: 38: Hoare triple {7270#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,820 INFO L273 TraceCheckUtils]: 39: Hoare triple {7270#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,821 INFO L273 TraceCheckUtils]: 40: Hoare triple {7270#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,821 INFO L273 TraceCheckUtils]: 41: Hoare triple {7270#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,821 INFO L273 TraceCheckUtils]: 42: Hoare triple {7270#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,821 INFO L273 TraceCheckUtils]: 43: Hoare triple {7270#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,821 INFO L273 TraceCheckUtils]: 44: Hoare triple {7270#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,821 INFO L273 TraceCheckUtils]: 45: Hoare triple {7270#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,822 INFO L273 TraceCheckUtils]: 46: Hoare triple {7270#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,822 INFO L273 TraceCheckUtils]: 47: Hoare triple {7270#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,822 INFO L273 TraceCheckUtils]: 48: Hoare triple {7270#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,822 INFO L273 TraceCheckUtils]: 49: Hoare triple {7270#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,822 INFO L273 TraceCheckUtils]: 50: Hoare triple {7270#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {7270#false} is VALID [2018-11-14 19:08:40,822 INFO L273 TraceCheckUtils]: 51: Hoare triple {7270#false} assume #t~mem41 == 8544;havoc #t~mem41; {7270#false} is VALID [2018-11-14 19:08:40,823 INFO L273 TraceCheckUtils]: 52: Hoare triple {7270#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {7270#false} is VALID [2018-11-14 19:08:40,823 INFO L273 TraceCheckUtils]: 53: Hoare triple {7270#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {7270#false} is VALID [2018-11-14 19:08:40,823 INFO L273 TraceCheckUtils]: 54: Hoare triple {7270#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {7270#false} is VALID [2018-11-14 19:08:40,823 INFO L273 TraceCheckUtils]: 55: Hoare triple {7270#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {7270#false} is VALID [2018-11-14 19:08:40,823 INFO L273 TraceCheckUtils]: 56: Hoare triple {7270#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {7270#false} is VALID [2018-11-14 19:08:40,823 INFO L273 TraceCheckUtils]: 57: Hoare triple {7270#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {7270#false} is VALID [2018-11-14 19:08:40,824 INFO L273 TraceCheckUtils]: 58: Hoare triple {7270#false} assume ~blastFlag~0 == 8; {7270#false} is VALID [2018-11-14 19:08:40,824 INFO L273 TraceCheckUtils]: 59: Hoare triple {7270#false} assume !false; {7270#false} is VALID [2018-11-14 19:08:40,831 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:40,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:40,832 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:40,832 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 60 [2018-11-14 19:08:40,832 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:40,832 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:40,933 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:40,933 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:40,934 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:40,934 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:40,934 INFO L87 Difference]: Start difference. First operand 154 states and 227 transitions. Second operand 4 states. [2018-11-14 19:08:43,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:43,376 INFO L93 Difference]: Finished difference Result 285 states and 428 transitions. [2018-11-14 19:08:43,376 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:43,376 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 60 [2018-11-14 19:08:43,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:43,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:43,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 428 transitions. [2018-11-14 19:08:43,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:43,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 428 transitions. [2018-11-14 19:08:43,384 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 428 transitions. [2018-11-14 19:08:44,192 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 428 edges. 428 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:44,196 INFO L225 Difference]: With dead ends: 285 [2018-11-14 19:08:44,196 INFO L226 Difference]: Without dead ends: 157 [2018-11-14 19:08:44,197 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:44,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2018-11-14 19:08:44,212 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 154. [2018-11-14 19:08:44,213 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:44,213 INFO L82 GeneralOperation]: Start isEquivalent. First operand 157 states. Second operand 154 states. [2018-11-14 19:08:44,213 INFO L74 IsIncluded]: Start isIncluded. First operand 157 states. Second operand 154 states. [2018-11-14 19:08:44,213 INFO L87 Difference]: Start difference. First operand 157 states. Second operand 154 states. [2018-11-14 19:08:44,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:44,218 INFO L93 Difference]: Finished difference Result 157 states and 230 transitions. [2018-11-14 19:08:44,218 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 230 transitions. [2018-11-14 19:08:44,218 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:44,219 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:44,219 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 157 states. [2018-11-14 19:08:44,219 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 157 states. [2018-11-14 19:08:44,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:44,223 INFO L93 Difference]: Finished difference Result 157 states and 230 transitions. [2018-11-14 19:08:44,223 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 230 transitions. [2018-11-14 19:08:44,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:44,224 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:44,224 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:44,224 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:44,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2018-11-14 19:08:44,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 226 transitions. [2018-11-14 19:08:44,228 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 226 transitions. Word has length 60 [2018-11-14 19:08:44,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:44,228 INFO L480 AbstractCegarLoop]: Abstraction has 154 states and 226 transitions. [2018-11-14 19:08:44,228 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:44,228 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 226 transitions. [2018-11-14 19:08:44,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-14 19:08:44,229 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:44,229 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:44,229 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:44,230 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:44,230 INFO L82 PathProgramCache]: Analyzing trace with hash 1568704370, now seen corresponding path program 1 times [2018-11-14 19:08:44,230 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:44,230 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:44,231 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:44,231 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:44,232 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:44,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:44,825 INFO L256 TraceCheckUtils]: 0: Hoare triple {8114#true} call ULTIMATE.init(); {8114#true} is VALID [2018-11-14 19:08:44,826 INFO L273 TraceCheckUtils]: 1: Hoare triple {8114#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {8114#true} is VALID [2018-11-14 19:08:44,826 INFO L273 TraceCheckUtils]: 2: Hoare triple {8114#true} assume true; {8114#true} is VALID [2018-11-14 19:08:44,826 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8114#true} {8114#true} #682#return; {8114#true} is VALID [2018-11-14 19:08:44,827 INFO L256 TraceCheckUtils]: 4: Hoare triple {8114#true} call #t~ret138 := main(); {8114#true} is VALID [2018-11-14 19:08:44,827 INFO L273 TraceCheckUtils]: 5: Hoare triple {8114#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {8114#true} is VALID [2018-11-14 19:08:44,827 INFO L256 TraceCheckUtils]: 6: Hoare triple {8114#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {8114#true} is VALID [2018-11-14 19:08:44,827 INFO L273 TraceCheckUtils]: 7: Hoare triple {8114#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {8114#true} is VALID [2018-11-14 19:08:44,827 INFO L273 TraceCheckUtils]: 8: Hoare triple {8114#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {8114#true} is VALID [2018-11-14 19:08:44,828 INFO L273 TraceCheckUtils]: 9: Hoare triple {8114#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {8114#true} is VALID [2018-11-14 19:08:44,828 INFO L273 TraceCheckUtils]: 10: Hoare triple {8114#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {8114#true} is VALID [2018-11-14 19:08:44,828 INFO L273 TraceCheckUtils]: 11: Hoare triple {8114#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {8114#true} is VALID [2018-11-14 19:08:44,828 INFO L273 TraceCheckUtils]: 12: Hoare triple {8114#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {8114#true} is VALID [2018-11-14 19:08:44,828 INFO L273 TraceCheckUtils]: 13: Hoare triple {8114#true} assume true; {8114#true} is VALID [2018-11-14 19:08:44,832 INFO L273 TraceCheckUtils]: 14: Hoare triple {8114#true} assume !false; {8114#true} is VALID [2018-11-14 19:08:44,833 INFO L273 TraceCheckUtils]: 15: Hoare triple {8114#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,833 INFO L273 TraceCheckUtils]: 16: Hoare triple {8114#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,833 INFO L273 TraceCheckUtils]: 17: Hoare triple {8114#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,833 INFO L273 TraceCheckUtils]: 18: Hoare triple {8114#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,833 INFO L273 TraceCheckUtils]: 19: Hoare triple {8114#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,834 INFO L273 TraceCheckUtils]: 20: Hoare triple {8114#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,834 INFO L273 TraceCheckUtils]: 21: Hoare triple {8114#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,834 INFO L273 TraceCheckUtils]: 22: Hoare triple {8114#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,834 INFO L273 TraceCheckUtils]: 23: Hoare triple {8114#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {8114#true} is VALID [2018-11-14 19:08:44,834 INFO L273 TraceCheckUtils]: 24: Hoare triple {8114#true} assume #t~mem32 == 8464;havoc #t~mem32; {8114#true} is VALID [2018-11-14 19:08:44,835 INFO L273 TraceCheckUtils]: 25: Hoare triple {8114#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {8114#true} is VALID [2018-11-14 19:08:44,835 INFO L273 TraceCheckUtils]: 26: Hoare triple {8114#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {8114#true} is VALID [2018-11-14 19:08:44,849 INFO L273 TraceCheckUtils]: 27: Hoare triple {8114#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,863 INFO L273 TraceCheckUtils]: 28: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,872 INFO L273 TraceCheckUtils]: 29: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,884 INFO L273 TraceCheckUtils]: 30: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,894 INFO L273 TraceCheckUtils]: 31: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume true; {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,896 INFO L273 TraceCheckUtils]: 32: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,896 INFO L273 TraceCheckUtils]: 33: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,898 INFO L273 TraceCheckUtils]: 34: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,898 INFO L273 TraceCheckUtils]: 35: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,900 INFO L273 TraceCheckUtils]: 36: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,900 INFO L273 TraceCheckUtils]: 37: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,902 INFO L273 TraceCheckUtils]: 38: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,902 INFO L273 TraceCheckUtils]: 39: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,904 INFO L273 TraceCheckUtils]: 40: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,904 INFO L273 TraceCheckUtils]: 41: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,904 INFO L273 TraceCheckUtils]: 42: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,905 INFO L273 TraceCheckUtils]: 43: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:44,905 INFO L273 TraceCheckUtils]: 44: Hoare triple {8116#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {8117#(= 8496 |ssl3_accept_#t~mem35|)} is VALID [2018-11-14 19:08:44,905 INFO L273 TraceCheckUtils]: 45: Hoare triple {8117#(= 8496 |ssl3_accept_#t~mem35|)} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 46: Hoare triple {8115#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 47: Hoare triple {8115#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 48: Hoare triple {8115#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 49: Hoare triple {8115#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 50: Hoare triple {8115#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 51: Hoare triple {8115#false} assume #t~mem41 == 8544;havoc #t~mem41; {8115#false} is VALID [2018-11-14 19:08:44,906 INFO L273 TraceCheckUtils]: 52: Hoare triple {8115#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 53: Hoare triple {8115#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 54: Hoare triple {8115#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 55: Hoare triple {8115#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 56: Hoare triple {8115#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 57: Hoare triple {8115#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 58: Hoare triple {8115#false} assume ~blastFlag~0 == 8; {8115#false} is VALID [2018-11-14 19:08:44,907 INFO L273 TraceCheckUtils]: 59: Hoare triple {8115#false} assume !false; {8115#false} is VALID [2018-11-14 19:08:44,910 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:44,910 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:44,910 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:44,911 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 60 [2018-11-14 19:08:44,911 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:44,911 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:44,972 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:44,972 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:44,973 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:44,973 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:44,973 INFO L87 Difference]: Start difference. First operand 154 states and 226 transitions. Second operand 4 states. [2018-11-14 19:08:46,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:46,687 INFO L93 Difference]: Finished difference Result 326 states and 490 transitions. [2018-11-14 19:08:46,687 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:46,687 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 60 [2018-11-14 19:08:46,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:46,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:46,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-14 19:08:46,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:46,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-14 19:08:46,696 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 478 transitions. [2018-11-14 19:08:47,713 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 478 edges. 478 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:47,717 INFO L225 Difference]: With dead ends: 326 [2018-11-14 19:08:47,717 INFO L226 Difference]: Without dead ends: 198 [2018-11-14 19:08:47,718 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:47,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2018-11-14 19:08:47,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 177. [2018-11-14 19:08:47,836 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:47,836 INFO L82 GeneralOperation]: Start isEquivalent. First operand 198 states. Second operand 177 states. [2018-11-14 19:08:47,836 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 177 states. [2018-11-14 19:08:47,836 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 177 states. [2018-11-14 19:08:47,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:47,842 INFO L93 Difference]: Finished difference Result 198 states and 292 transitions. [2018-11-14 19:08:47,842 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 292 transitions. [2018-11-14 19:08:47,843 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:47,843 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:47,843 INFO L74 IsIncluded]: Start isIncluded. First operand 177 states. Second operand 198 states. [2018-11-14 19:08:47,843 INFO L87 Difference]: Start difference. First operand 177 states. Second operand 198 states. [2018-11-14 19:08:47,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:47,847 INFO L93 Difference]: Finished difference Result 198 states and 292 transitions. [2018-11-14 19:08:47,847 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 292 transitions. [2018-11-14 19:08:47,849 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:47,849 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:47,849 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:47,850 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:47,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 177 states. [2018-11-14 19:08:47,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 265 transitions. [2018-11-14 19:08:47,853 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 265 transitions. Word has length 60 [2018-11-14 19:08:47,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:47,854 INFO L480 AbstractCegarLoop]: Abstraction has 177 states and 265 transitions. [2018-11-14 19:08:47,854 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:47,854 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 265 transitions. [2018-11-14 19:08:47,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-14 19:08:47,855 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:47,855 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:47,855 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:47,855 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:47,856 INFO L82 PathProgramCache]: Analyzing trace with hash 787078372, now seen corresponding path program 1 times [2018-11-14 19:08:47,856 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:47,856 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:47,857 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:47,857 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:47,857 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:47,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:48,021 INFO L256 TraceCheckUtils]: 0: Hoare triple {9114#true} call ULTIMATE.init(); {9114#true} is VALID [2018-11-14 19:08:48,021 INFO L273 TraceCheckUtils]: 1: Hoare triple {9114#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {9114#true} is VALID [2018-11-14 19:08:48,022 INFO L273 TraceCheckUtils]: 2: Hoare triple {9114#true} assume true; {9114#true} is VALID [2018-11-14 19:08:48,022 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9114#true} {9114#true} #682#return; {9114#true} is VALID [2018-11-14 19:08:48,022 INFO L256 TraceCheckUtils]: 4: Hoare triple {9114#true} call #t~ret138 := main(); {9114#true} is VALID [2018-11-14 19:08:48,022 INFO L273 TraceCheckUtils]: 5: Hoare triple {9114#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {9114#true} is VALID [2018-11-14 19:08:48,023 INFO L256 TraceCheckUtils]: 6: Hoare triple {9114#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {9114#true} is VALID [2018-11-14 19:08:48,023 INFO L273 TraceCheckUtils]: 7: Hoare triple {9114#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {9114#true} is VALID [2018-11-14 19:08:48,023 INFO L273 TraceCheckUtils]: 8: Hoare triple {9114#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {9114#true} is VALID [2018-11-14 19:08:48,023 INFO L273 TraceCheckUtils]: 9: Hoare triple {9114#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 10: Hoare triple {9114#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 11: Hoare triple {9114#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 12: Hoare triple {9114#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 13: Hoare triple {9114#true} assume true; {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 14: Hoare triple {9114#true} assume !false; {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 15: Hoare triple {9114#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,024 INFO L273 TraceCheckUtils]: 16: Hoare triple {9114#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,025 INFO L273 TraceCheckUtils]: 17: Hoare triple {9114#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,025 INFO L273 TraceCheckUtils]: 18: Hoare triple {9114#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,025 INFO L273 TraceCheckUtils]: 19: Hoare triple {9114#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,025 INFO L273 TraceCheckUtils]: 20: Hoare triple {9114#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,025 INFO L273 TraceCheckUtils]: 21: Hoare triple {9114#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,026 INFO L273 TraceCheckUtils]: 22: Hoare triple {9114#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,026 INFO L273 TraceCheckUtils]: 23: Hoare triple {9114#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {9114#true} is VALID [2018-11-14 19:08:48,026 INFO L273 TraceCheckUtils]: 24: Hoare triple {9114#true} assume #t~mem32 == 8464;havoc #t~mem32; {9114#true} is VALID [2018-11-14 19:08:48,026 INFO L273 TraceCheckUtils]: 25: Hoare triple {9114#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {9114#true} is VALID [2018-11-14 19:08:48,026 INFO L273 TraceCheckUtils]: 26: Hoare triple {9114#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {9114#true} is VALID [2018-11-14 19:08:48,042 INFO L273 TraceCheckUtils]: 27: Hoare triple {9114#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,051 INFO L273 TraceCheckUtils]: 28: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,064 INFO L273 TraceCheckUtils]: 29: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,073 INFO L273 TraceCheckUtils]: 30: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,084 INFO L273 TraceCheckUtils]: 31: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,085 INFO L273 TraceCheckUtils]: 32: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,089 INFO L273 TraceCheckUtils]: 33: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,089 INFO L273 TraceCheckUtils]: 34: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,091 INFO L273 TraceCheckUtils]: 35: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,091 INFO L273 TraceCheckUtils]: 36: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,093 INFO L273 TraceCheckUtils]: 37: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:48,093 INFO L273 TraceCheckUtils]: 38: Hoare triple {9116#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {9117#(= |ssl3_accept_#t~mem29| 8496)} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 39: Hoare triple {9117#(= |ssl3_accept_#t~mem29| 8496)} assume #t~mem29 == 8480;havoc #t~mem29; {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 40: Hoare triple {9115#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 41: Hoare triple {9115#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(8482, #t~mem68.base, #t~mem68.offset + 604 + 240, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 42: Hoare triple {9115#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 43: Hoare triple {9115#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 44: Hoare triple {9115#false} ~skip~0 := 0; {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 45: Hoare triple {9115#false} assume true; {9115#false} is VALID [2018-11-14 19:08:48,094 INFO L273 TraceCheckUtils]: 46: Hoare triple {9115#false} assume !false; {9115#false} is VALID [2018-11-14 19:08:48,095 INFO L273 TraceCheckUtils]: 47: Hoare triple {9115#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,095 INFO L273 TraceCheckUtils]: 48: Hoare triple {9115#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,095 INFO L273 TraceCheckUtils]: 49: Hoare triple {9115#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,095 INFO L273 TraceCheckUtils]: 50: Hoare triple {9115#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,095 INFO L273 TraceCheckUtils]: 51: Hoare triple {9115#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,095 INFO L273 TraceCheckUtils]: 52: Hoare triple {9115#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,096 INFO L273 TraceCheckUtils]: 53: Hoare triple {9115#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,096 INFO L273 TraceCheckUtils]: 54: Hoare triple {9115#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,096 INFO L273 TraceCheckUtils]: 55: Hoare triple {9115#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,096 INFO L273 TraceCheckUtils]: 56: Hoare triple {9115#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,096 INFO L273 TraceCheckUtils]: 57: Hoare triple {9115#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,097 INFO L273 TraceCheckUtils]: 58: Hoare triple {9115#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,097 INFO L273 TraceCheckUtils]: 59: Hoare triple {9115#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,097 INFO L273 TraceCheckUtils]: 60: Hoare triple {9115#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,097 INFO L273 TraceCheckUtils]: 61: Hoare triple {9115#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,097 INFO L273 TraceCheckUtils]: 62: Hoare triple {9115#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,098 INFO L273 TraceCheckUtils]: 63: Hoare triple {9115#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,098 INFO L273 TraceCheckUtils]: 64: Hoare triple {9115#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {9115#false} is VALID [2018-11-14 19:08:48,098 INFO L273 TraceCheckUtils]: 65: Hoare triple {9115#false} assume #t~mem41 == 8544;havoc #t~mem41; {9115#false} is VALID [2018-11-14 19:08:48,098 INFO L273 TraceCheckUtils]: 66: Hoare triple {9115#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {9115#false} is VALID [2018-11-14 19:08:48,098 INFO L273 TraceCheckUtils]: 67: Hoare triple {9115#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {9115#false} is VALID [2018-11-14 19:08:48,099 INFO L273 TraceCheckUtils]: 68: Hoare triple {9115#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {9115#false} is VALID [2018-11-14 19:08:48,099 INFO L273 TraceCheckUtils]: 69: Hoare triple {9115#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {9115#false} is VALID [2018-11-14 19:08:48,099 INFO L273 TraceCheckUtils]: 70: Hoare triple {9115#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {9115#false} is VALID [2018-11-14 19:08:48,099 INFO L273 TraceCheckUtils]: 71: Hoare triple {9115#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {9115#false} is VALID [2018-11-14 19:08:48,099 INFO L273 TraceCheckUtils]: 72: Hoare triple {9115#false} assume ~blastFlag~0 == 8; {9115#false} is VALID [2018-11-14 19:08:48,100 INFO L273 TraceCheckUtils]: 73: Hoare triple {9115#false} assume !false; {9115#false} is VALID [2018-11-14 19:08:48,104 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:48,104 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:48,104 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:48,105 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-14 19:08:48,105 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:48,105 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:48,239 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:48,240 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:48,240 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:48,240 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:48,240 INFO L87 Difference]: Start difference. First operand 177 states and 265 transitions. Second operand 4 states. [2018-11-14 19:08:49,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:49,390 INFO L93 Difference]: Finished difference Result 349 states and 528 transitions. [2018-11-14 19:08:49,390 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:49,390 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-14 19:08:49,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:49,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:49,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 477 transitions. [2018-11-14 19:08:49,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:49,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 477 transitions. [2018-11-14 19:08:49,397 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 477 transitions. [2018-11-14 19:08:49,836 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 477 edges. 477 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:49,840 INFO L225 Difference]: With dead ends: 349 [2018-11-14 19:08:49,841 INFO L226 Difference]: Without dead ends: 198 [2018-11-14 19:08:49,841 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:49,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2018-11-14 19:08:49,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 177. [2018-11-14 19:08:49,882 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:49,882 INFO L82 GeneralOperation]: Start isEquivalent. First operand 198 states. Second operand 177 states. [2018-11-14 19:08:49,882 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 177 states. [2018-11-14 19:08:49,883 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 177 states. [2018-11-14 19:08:49,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:49,888 INFO L93 Difference]: Finished difference Result 198 states and 291 transitions. [2018-11-14 19:08:49,888 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 291 transitions. [2018-11-14 19:08:49,888 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:49,889 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:49,889 INFO L74 IsIncluded]: Start isIncluded. First operand 177 states. Second operand 198 states. [2018-11-14 19:08:49,889 INFO L87 Difference]: Start difference. First operand 177 states. Second operand 198 states. [2018-11-14 19:08:49,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:49,893 INFO L93 Difference]: Finished difference Result 198 states and 291 transitions. [2018-11-14 19:08:49,893 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 291 transitions. [2018-11-14 19:08:49,894 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:49,894 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:49,894 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:49,894 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:49,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 177 states. [2018-11-14 19:08:49,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 264 transitions. [2018-11-14 19:08:49,897 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 264 transitions. Word has length 74 [2018-11-14 19:08:49,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:49,898 INFO L480 AbstractCegarLoop]: Abstraction has 177 states and 264 transitions. [2018-11-14 19:08:49,898 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:49,898 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 264 transitions. [2018-11-14 19:08:49,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-14 19:08:49,898 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:49,899 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:49,899 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:49,899 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:49,899 INFO L82 PathProgramCache]: Analyzing trace with hash 483531968, now seen corresponding path program 1 times [2018-11-14 19:08:49,899 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:49,899 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:49,900 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:49,900 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:49,900 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:49,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:50,183 INFO L256 TraceCheckUtils]: 0: Hoare triple {10139#true} call ULTIMATE.init(); {10139#true} is VALID [2018-11-14 19:08:50,183 INFO L273 TraceCheckUtils]: 1: Hoare triple {10139#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {10139#true} is VALID [2018-11-14 19:08:50,183 INFO L273 TraceCheckUtils]: 2: Hoare triple {10139#true} assume true; {10139#true} is VALID [2018-11-14 19:08:50,183 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10139#true} {10139#true} #682#return; {10139#true} is VALID [2018-11-14 19:08:50,184 INFO L256 TraceCheckUtils]: 4: Hoare triple {10139#true} call #t~ret138 := main(); {10139#true} is VALID [2018-11-14 19:08:50,184 INFO L273 TraceCheckUtils]: 5: Hoare triple {10139#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {10139#true} is VALID [2018-11-14 19:08:50,184 INFO L256 TraceCheckUtils]: 6: Hoare triple {10139#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10139#true} is VALID [2018-11-14 19:08:50,184 INFO L273 TraceCheckUtils]: 7: Hoare triple {10139#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {10139#true} is VALID [2018-11-14 19:08:50,184 INFO L273 TraceCheckUtils]: 8: Hoare triple {10139#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {10139#true} is VALID [2018-11-14 19:08:50,185 INFO L273 TraceCheckUtils]: 9: Hoare triple {10139#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {10139#true} is VALID [2018-11-14 19:08:50,185 INFO L273 TraceCheckUtils]: 10: Hoare triple {10139#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {10139#true} is VALID [2018-11-14 19:08:50,185 INFO L273 TraceCheckUtils]: 11: Hoare triple {10139#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {10139#true} is VALID [2018-11-14 19:08:50,185 INFO L273 TraceCheckUtils]: 12: Hoare triple {10139#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {10139#true} is VALID [2018-11-14 19:08:50,185 INFO L273 TraceCheckUtils]: 13: Hoare triple {10139#true} assume true; {10139#true} is VALID [2018-11-14 19:08:50,186 INFO L273 TraceCheckUtils]: 14: Hoare triple {10139#true} assume !false; {10139#true} is VALID [2018-11-14 19:08:50,186 INFO L273 TraceCheckUtils]: 15: Hoare triple {10139#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,186 INFO L273 TraceCheckUtils]: 16: Hoare triple {10139#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,186 INFO L273 TraceCheckUtils]: 17: Hoare triple {10139#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,186 INFO L273 TraceCheckUtils]: 18: Hoare triple {10139#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,187 INFO L273 TraceCheckUtils]: 19: Hoare triple {10139#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,187 INFO L273 TraceCheckUtils]: 20: Hoare triple {10139#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,187 INFO L273 TraceCheckUtils]: 21: Hoare triple {10139#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,187 INFO L273 TraceCheckUtils]: 22: Hoare triple {10139#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,187 INFO L273 TraceCheckUtils]: 23: Hoare triple {10139#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,188 INFO L273 TraceCheckUtils]: 24: Hoare triple {10139#true} assume #t~mem32 == 8464;havoc #t~mem32; {10139#true} is VALID [2018-11-14 19:08:50,188 INFO L273 TraceCheckUtils]: 25: Hoare triple {10139#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {10139#true} is VALID [2018-11-14 19:08:50,188 INFO L273 TraceCheckUtils]: 26: Hoare triple {10139#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {10139#true} is VALID [2018-11-14 19:08:50,188 INFO L273 TraceCheckUtils]: 27: Hoare triple {10139#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {10139#true} is VALID [2018-11-14 19:08:50,188 INFO L273 TraceCheckUtils]: 28: Hoare triple {10139#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {10139#true} is VALID [2018-11-14 19:08:50,189 INFO L273 TraceCheckUtils]: 29: Hoare triple {10139#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10139#true} is VALID [2018-11-14 19:08:50,189 INFO L273 TraceCheckUtils]: 30: Hoare triple {10139#true} ~skip~0 := 0; {10139#true} is VALID [2018-11-14 19:08:50,189 INFO L273 TraceCheckUtils]: 31: Hoare triple {10139#true} assume true; {10139#true} is VALID [2018-11-14 19:08:50,189 INFO L273 TraceCheckUtils]: 32: Hoare triple {10139#true} assume !false; {10139#true} is VALID [2018-11-14 19:08:50,189 INFO L273 TraceCheckUtils]: 33: Hoare triple {10139#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,190 INFO L273 TraceCheckUtils]: 34: Hoare triple {10139#true} assume #t~mem24 == 12292;havoc #t~mem24; {10139#true} is VALID [2018-11-14 19:08:50,190 INFO L273 TraceCheckUtils]: 35: Hoare triple {10139#true} call write~int(1, ~s.base, ~s.offset + 40, 4); {10139#true} is VALID [2018-11-14 19:08:50,190 INFO L273 TraceCheckUtils]: 36: Hoare triple {10139#true} call write~int(1, ~s.base, ~s.offset + 36, 4); {10139#true} is VALID [2018-11-14 19:08:50,190 INFO L273 TraceCheckUtils]: 37: Hoare triple {10139#true} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {10139#true} is VALID [2018-11-14 19:08:50,190 INFO L273 TraceCheckUtils]: 38: Hoare triple {10139#true} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {10139#true} is VALID [2018-11-14 19:08:50,191 INFO L273 TraceCheckUtils]: 39: Hoare triple {10139#true} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {10139#true} is VALID [2018-11-14 19:08:50,191 INFO L273 TraceCheckUtils]: 40: Hoare triple {10139#true} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {10139#true} is VALID [2018-11-14 19:08:50,191 INFO L273 TraceCheckUtils]: 41: Hoare triple {10139#true} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {10139#true} is VALID [2018-11-14 19:08:50,204 INFO L273 TraceCheckUtils]: 42: Hoare triple {10139#true} assume !(#t~mem62 != 12292);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem66 := read~int(#t~mem65.base, #t~mem65.offset + 60 + 16, 4);call write~int(#t~mem66 + 1, #t~mem65.base, #t~mem65.offset + 60 + 16, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, ~s.offset + 52, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,214 INFO L273 TraceCheckUtils]: 43: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,218 INFO L273 TraceCheckUtils]: 44: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,220 INFO L273 TraceCheckUtils]: 45: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,220 INFO L273 TraceCheckUtils]: 46: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume true; {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,222 INFO L273 TraceCheckUtils]: 47: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,222 INFO L273 TraceCheckUtils]: 48: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,224 INFO L273 TraceCheckUtils]: 49: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,224 INFO L273 TraceCheckUtils]: 50: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,226 INFO L273 TraceCheckUtils]: 51: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,235 INFO L273 TraceCheckUtils]: 52: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:50,247 INFO L273 TraceCheckUtils]: 53: Hoare triple {10141#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {10142#(= 8480 |ssl3_accept_#t~mem29|)} is VALID [2018-11-14 19:08:50,260 INFO L273 TraceCheckUtils]: 54: Hoare triple {10142#(= 8480 |ssl3_accept_#t~mem29|)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,260 INFO L273 TraceCheckUtils]: 55: Hoare triple {10140#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,260 INFO L273 TraceCheckUtils]: 56: Hoare triple {10140#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,261 INFO L273 TraceCheckUtils]: 57: Hoare triple {10140#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,261 INFO L273 TraceCheckUtils]: 58: Hoare triple {10140#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,261 INFO L273 TraceCheckUtils]: 59: Hoare triple {10140#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,261 INFO L273 TraceCheckUtils]: 60: Hoare triple {10140#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,261 INFO L273 TraceCheckUtils]: 61: Hoare triple {10140#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,261 INFO L273 TraceCheckUtils]: 62: Hoare triple {10140#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,262 INFO L273 TraceCheckUtils]: 63: Hoare triple {10140#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,262 INFO L273 TraceCheckUtils]: 64: Hoare triple {10140#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,262 INFO L273 TraceCheckUtils]: 65: Hoare triple {10140#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {10140#false} is VALID [2018-11-14 19:08:50,262 INFO L273 TraceCheckUtils]: 66: Hoare triple {10140#false} assume #t~mem41 == 8544;havoc #t~mem41; {10140#false} is VALID [2018-11-14 19:08:50,262 INFO L273 TraceCheckUtils]: 67: Hoare triple {10140#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {10140#false} is VALID [2018-11-14 19:08:50,262 INFO L273 TraceCheckUtils]: 68: Hoare triple {10140#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {10140#false} is VALID [2018-11-14 19:08:50,263 INFO L273 TraceCheckUtils]: 69: Hoare triple {10140#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {10140#false} is VALID [2018-11-14 19:08:50,263 INFO L273 TraceCheckUtils]: 70: Hoare triple {10140#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {10140#false} is VALID [2018-11-14 19:08:50,263 INFO L273 TraceCheckUtils]: 71: Hoare triple {10140#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {10140#false} is VALID [2018-11-14 19:08:50,263 INFO L273 TraceCheckUtils]: 72: Hoare triple {10140#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {10140#false} is VALID [2018-11-14 19:08:50,263 INFO L273 TraceCheckUtils]: 73: Hoare triple {10140#false} assume ~blastFlag~0 == 8; {10140#false} is VALID [2018-11-14 19:08:50,264 INFO L273 TraceCheckUtils]: 74: Hoare triple {10140#false} assume !false; {10140#false} is VALID [2018-11-14 19:08:50,267 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-14 19:08:50,267 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:50,267 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:50,268 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-14 19:08:50,268 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:50,268 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:50,364 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:50,364 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:50,364 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:50,364 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:50,365 INFO L87 Difference]: Start difference. First operand 177 states and 264 transitions. Second operand 4 states. [2018-11-14 19:08:52,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:52,280 INFO L93 Difference]: Finished difference Result 358 states and 543 transitions. [2018-11-14 19:08:52,280 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:52,281 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-14 19:08:52,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:52,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:52,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 455 transitions. [2018-11-14 19:08:52,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:52,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 455 transitions. [2018-11-14 19:08:52,286 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 455 transitions. [2018-11-14 19:08:52,691 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 455 edges. 455 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:52,695 INFO L225 Difference]: With dead ends: 358 [2018-11-14 19:08:52,695 INFO L226 Difference]: Without dead ends: 207 [2018-11-14 19:08:52,695 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:52,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-14 19:08:52,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 194. [2018-11-14 19:08:52,719 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:52,719 INFO L82 GeneralOperation]: Start isEquivalent. First operand 207 states. Second operand 194 states. [2018-11-14 19:08:52,720 INFO L74 IsIncluded]: Start isIncluded. First operand 207 states. Second operand 194 states. [2018-11-14 19:08:52,720 INFO L87 Difference]: Start difference. First operand 207 states. Second operand 194 states. [2018-11-14 19:08:52,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:52,724 INFO L93 Difference]: Finished difference Result 207 states and 307 transitions. [2018-11-14 19:08:52,724 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 307 transitions. [2018-11-14 19:08:52,724 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:52,724 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:52,724 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 207 states. [2018-11-14 19:08:52,724 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 207 states. [2018-11-14 19:08:52,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:52,728 INFO L93 Difference]: Finished difference Result 207 states and 307 transitions. [2018-11-14 19:08:52,728 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 307 transitions. [2018-11-14 19:08:52,729 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:52,729 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:52,729 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:52,729 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:52,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-14 19:08:52,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 291 transitions. [2018-11-14 19:08:52,733 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 291 transitions. Word has length 75 [2018-11-14 19:08:52,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:52,733 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 291 transitions. [2018-11-14 19:08:52,734 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:52,734 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 291 transitions. [2018-11-14 19:08:52,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-14 19:08:52,735 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:52,735 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:52,735 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:52,735 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:52,735 INFO L82 PathProgramCache]: Analyzing trace with hash -2111946987, now seen corresponding path program 1 times [2018-11-14 19:08:52,735 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:52,736 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:52,737 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:52,737 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:52,737 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:52,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:52,876 INFO L256 TraceCheckUtils]: 0: Hoare triple {11209#true} call ULTIMATE.init(); {11209#true} is VALID [2018-11-14 19:08:52,877 INFO L273 TraceCheckUtils]: 1: Hoare triple {11209#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {11209#true} is VALID [2018-11-14 19:08:52,877 INFO L273 TraceCheckUtils]: 2: Hoare triple {11209#true} assume true; {11209#true} is VALID [2018-11-14 19:08:52,877 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11209#true} {11209#true} #682#return; {11209#true} is VALID [2018-11-14 19:08:52,878 INFO L256 TraceCheckUtils]: 4: Hoare triple {11209#true} call #t~ret138 := main(); {11209#true} is VALID [2018-11-14 19:08:52,878 INFO L273 TraceCheckUtils]: 5: Hoare triple {11209#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {11209#true} is VALID [2018-11-14 19:08:52,878 INFO L256 TraceCheckUtils]: 6: Hoare triple {11209#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {11209#true} is VALID [2018-11-14 19:08:52,879 INFO L273 TraceCheckUtils]: 7: Hoare triple {11209#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {11209#true} is VALID [2018-11-14 19:08:52,879 INFO L273 TraceCheckUtils]: 8: Hoare triple {11209#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {11209#true} is VALID [2018-11-14 19:08:52,879 INFO L273 TraceCheckUtils]: 9: Hoare triple {11209#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {11209#true} is VALID [2018-11-14 19:08:52,879 INFO L273 TraceCheckUtils]: 10: Hoare triple {11209#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {11209#true} is VALID [2018-11-14 19:08:52,880 INFO L273 TraceCheckUtils]: 11: Hoare triple {11209#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {11209#true} is VALID [2018-11-14 19:08:52,880 INFO L273 TraceCheckUtils]: 12: Hoare triple {11209#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {11209#true} is VALID [2018-11-14 19:08:52,880 INFO L273 TraceCheckUtils]: 13: Hoare triple {11209#true} assume true; {11209#true} is VALID [2018-11-14 19:08:52,880 INFO L273 TraceCheckUtils]: 14: Hoare triple {11209#true} assume !false; {11209#true} is VALID [2018-11-14 19:08:52,880 INFO L273 TraceCheckUtils]: 15: Hoare triple {11209#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,880 INFO L273 TraceCheckUtils]: 16: Hoare triple {11209#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 17: Hoare triple {11209#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 18: Hoare triple {11209#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 19: Hoare triple {11209#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 20: Hoare triple {11209#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 21: Hoare triple {11209#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 22: Hoare triple {11209#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,881 INFO L273 TraceCheckUtils]: 23: Hoare triple {11209#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {11209#true} is VALID [2018-11-14 19:08:52,882 INFO L273 TraceCheckUtils]: 24: Hoare triple {11209#true} assume #t~mem32 == 8464;havoc #t~mem32; {11209#true} is VALID [2018-11-14 19:08:52,882 INFO L273 TraceCheckUtils]: 25: Hoare triple {11209#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {11209#true} is VALID [2018-11-14 19:08:52,882 INFO L273 TraceCheckUtils]: 26: Hoare triple {11209#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {11209#true} is VALID [2018-11-14 19:08:52,883 INFO L273 TraceCheckUtils]: 27: Hoare triple {11209#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,885 INFO L273 TraceCheckUtils]: 28: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,886 INFO L273 TraceCheckUtils]: 29: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,886 INFO L273 TraceCheckUtils]: 30: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,888 INFO L273 TraceCheckUtils]: 31: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,888 INFO L273 TraceCheckUtils]: 32: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,888 INFO L273 TraceCheckUtils]: 33: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,889 INFO L273 TraceCheckUtils]: 34: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,890 INFO L273 TraceCheckUtils]: 35: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,890 INFO L273 TraceCheckUtils]: 36: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,892 INFO L273 TraceCheckUtils]: 37: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,892 INFO L273 TraceCheckUtils]: 38: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:52,894 INFO L273 TraceCheckUtils]: 39: Hoare triple {11211#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {11212#(= |ssl3_accept_#t~mem30| 8496)} is VALID [2018-11-14 19:08:52,894 INFO L273 TraceCheckUtils]: 40: Hoare triple {11212#(= |ssl3_accept_#t~mem30| 8496)} assume #t~mem30 == 8481;havoc #t~mem30; {11210#false} is VALID [2018-11-14 19:08:52,895 INFO L273 TraceCheckUtils]: 41: Hoare triple {11210#false} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {11210#false} is VALID [2018-11-14 19:08:52,895 INFO L273 TraceCheckUtils]: 42: Hoare triple {11210#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(8482, #t~mem68.base, #t~mem68.offset + 604 + 240, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {11210#false} is VALID [2018-11-14 19:08:52,895 INFO L273 TraceCheckUtils]: 43: Hoare triple {11210#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {11210#false} is VALID [2018-11-14 19:08:52,895 INFO L273 TraceCheckUtils]: 44: Hoare triple {11210#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11210#false} is VALID [2018-11-14 19:08:52,896 INFO L273 TraceCheckUtils]: 45: Hoare triple {11210#false} ~skip~0 := 0; {11210#false} is VALID [2018-11-14 19:08:52,896 INFO L273 TraceCheckUtils]: 46: Hoare triple {11210#false} assume true; {11210#false} is VALID [2018-11-14 19:08:52,896 INFO L273 TraceCheckUtils]: 47: Hoare triple {11210#false} assume !false; {11210#false} is VALID [2018-11-14 19:08:52,896 INFO L273 TraceCheckUtils]: 48: Hoare triple {11210#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,897 INFO L273 TraceCheckUtils]: 49: Hoare triple {11210#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,897 INFO L273 TraceCheckUtils]: 50: Hoare triple {11210#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,897 INFO L273 TraceCheckUtils]: 51: Hoare triple {11210#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,897 INFO L273 TraceCheckUtils]: 52: Hoare triple {11210#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,898 INFO L273 TraceCheckUtils]: 53: Hoare triple {11210#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,898 INFO L273 TraceCheckUtils]: 54: Hoare triple {11210#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,898 INFO L273 TraceCheckUtils]: 55: Hoare triple {11210#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,898 INFO L273 TraceCheckUtils]: 56: Hoare triple {11210#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,899 INFO L273 TraceCheckUtils]: 57: Hoare triple {11210#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,899 INFO L273 TraceCheckUtils]: 58: Hoare triple {11210#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,899 INFO L273 TraceCheckUtils]: 59: Hoare triple {11210#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,899 INFO L273 TraceCheckUtils]: 60: Hoare triple {11210#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,899 INFO L273 TraceCheckUtils]: 61: Hoare triple {11210#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,899 INFO L273 TraceCheckUtils]: 62: Hoare triple {11210#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,900 INFO L273 TraceCheckUtils]: 63: Hoare triple {11210#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,900 INFO L273 TraceCheckUtils]: 64: Hoare triple {11210#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,900 INFO L273 TraceCheckUtils]: 65: Hoare triple {11210#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {11210#false} is VALID [2018-11-14 19:08:52,900 INFO L273 TraceCheckUtils]: 66: Hoare triple {11210#false} assume #t~mem41 == 8544;havoc #t~mem41; {11210#false} is VALID [2018-11-14 19:08:52,900 INFO L273 TraceCheckUtils]: 67: Hoare triple {11210#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {11210#false} is VALID [2018-11-14 19:08:52,901 INFO L273 TraceCheckUtils]: 68: Hoare triple {11210#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {11210#false} is VALID [2018-11-14 19:08:52,901 INFO L273 TraceCheckUtils]: 69: Hoare triple {11210#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {11210#false} is VALID [2018-11-14 19:08:52,901 INFO L273 TraceCheckUtils]: 70: Hoare triple {11210#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {11210#false} is VALID [2018-11-14 19:08:52,901 INFO L273 TraceCheckUtils]: 71: Hoare triple {11210#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {11210#false} is VALID [2018-11-14 19:08:52,901 INFO L273 TraceCheckUtils]: 72: Hoare triple {11210#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {11210#false} is VALID [2018-11-14 19:08:52,902 INFO L273 TraceCheckUtils]: 73: Hoare triple {11210#false} assume ~blastFlag~0 == 8; {11210#false} is VALID [2018-11-14 19:08:52,902 INFO L273 TraceCheckUtils]: 74: Hoare triple {11210#false} assume !false; {11210#false} is VALID [2018-11-14 19:08:52,935 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:52,936 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:52,936 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:52,936 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-14 19:08:52,937 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:52,937 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:53,096 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:53,097 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:53,097 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:53,097 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:53,097 INFO L87 Difference]: Start difference. First operand 194 states and 291 transitions. Second operand 4 states. [2018-11-14 19:08:54,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:54,283 INFO L93 Difference]: Finished difference Result 381 states and 578 transitions. [2018-11-14 19:08:54,283 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:54,283 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-14 19:08:54,284 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:54,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:54,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 474 transitions. [2018-11-14 19:08:54,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:54,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 474 transitions. [2018-11-14 19:08:54,288 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 474 transitions. [2018-11-14 19:08:54,704 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 474 edges. 474 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:54,709 INFO L225 Difference]: With dead ends: 381 [2018-11-14 19:08:54,709 INFO L226 Difference]: Without dead ends: 213 [2018-11-14 19:08:54,710 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:54,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2018-11-14 19:08:54,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 194. [2018-11-14 19:08:54,762 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:54,762 INFO L82 GeneralOperation]: Start isEquivalent. First operand 213 states. Second operand 194 states. [2018-11-14 19:08:54,762 INFO L74 IsIncluded]: Start isIncluded. First operand 213 states. Second operand 194 states. [2018-11-14 19:08:54,763 INFO L87 Difference]: Start difference. First operand 213 states. Second operand 194 states. [2018-11-14 19:08:54,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:54,767 INFO L93 Difference]: Finished difference Result 213 states and 315 transitions. [2018-11-14 19:08:54,767 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 315 transitions. [2018-11-14 19:08:54,768 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:54,768 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:54,768 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 213 states. [2018-11-14 19:08:54,768 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 213 states. [2018-11-14 19:08:54,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:54,772 INFO L93 Difference]: Finished difference Result 213 states and 315 transitions. [2018-11-14 19:08:54,773 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 315 transitions. [2018-11-14 19:08:54,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:54,773 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:54,773 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:54,773 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:54,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-14 19:08:54,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 290 transitions. [2018-11-14 19:08:54,777 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 290 transitions. Word has length 75 [2018-11-14 19:08:54,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:54,778 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 290 transitions. [2018-11-14 19:08:54,778 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:54,778 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 290 transitions. [2018-11-14 19:08:54,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-14 19:08:54,779 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:54,779 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:54,779 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:54,779 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:54,779 INFO L82 PathProgramCache]: Analyzing trace with hash -1521814540, now seen corresponding path program 1 times [2018-11-14 19:08:54,780 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:54,780 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:54,781 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:54,781 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:54,781 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:54,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:54,966 INFO L256 TraceCheckUtils]: 0: Hoare triple {12318#true} call ULTIMATE.init(); {12318#true} is VALID [2018-11-14 19:08:54,966 INFO L273 TraceCheckUtils]: 1: Hoare triple {12318#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {12318#true} is VALID [2018-11-14 19:08:54,966 INFO L273 TraceCheckUtils]: 2: Hoare triple {12318#true} assume true; {12318#true} is VALID [2018-11-14 19:08:54,966 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12318#true} {12318#true} #682#return; {12318#true} is VALID [2018-11-14 19:08:54,967 INFO L256 TraceCheckUtils]: 4: Hoare triple {12318#true} call #t~ret138 := main(); {12318#true} is VALID [2018-11-14 19:08:54,967 INFO L273 TraceCheckUtils]: 5: Hoare triple {12318#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {12318#true} is VALID [2018-11-14 19:08:54,967 INFO L256 TraceCheckUtils]: 6: Hoare triple {12318#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {12318#true} is VALID [2018-11-14 19:08:54,967 INFO L273 TraceCheckUtils]: 7: Hoare triple {12318#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {12318#true} is VALID [2018-11-14 19:08:54,968 INFO L273 TraceCheckUtils]: 8: Hoare triple {12318#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {12318#true} is VALID [2018-11-14 19:08:54,968 INFO L273 TraceCheckUtils]: 9: Hoare triple {12318#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {12318#true} is VALID [2018-11-14 19:08:54,968 INFO L273 TraceCheckUtils]: 10: Hoare triple {12318#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {12318#true} is VALID [2018-11-14 19:08:54,968 INFO L273 TraceCheckUtils]: 11: Hoare triple {12318#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {12318#true} is VALID [2018-11-14 19:08:54,968 INFO L273 TraceCheckUtils]: 12: Hoare triple {12318#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {12318#true} is VALID [2018-11-14 19:08:54,969 INFO L273 TraceCheckUtils]: 13: Hoare triple {12318#true} assume true; {12318#true} is VALID [2018-11-14 19:08:54,969 INFO L273 TraceCheckUtils]: 14: Hoare triple {12318#true} assume !false; {12318#true} is VALID [2018-11-14 19:08:54,969 INFO L273 TraceCheckUtils]: 15: Hoare triple {12318#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,969 INFO L273 TraceCheckUtils]: 16: Hoare triple {12318#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,969 INFO L273 TraceCheckUtils]: 17: Hoare triple {12318#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 18: Hoare triple {12318#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 19: Hoare triple {12318#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 20: Hoare triple {12318#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 21: Hoare triple {12318#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 22: Hoare triple {12318#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 23: Hoare triple {12318#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 24: Hoare triple {12318#true} assume #t~mem32 == 8464;havoc #t~mem32; {12318#true} is VALID [2018-11-14 19:08:54,970 INFO L273 TraceCheckUtils]: 25: Hoare triple {12318#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {12318#true} is VALID [2018-11-14 19:08:54,971 INFO L273 TraceCheckUtils]: 26: Hoare triple {12318#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {12318#true} is VALID [2018-11-14 19:08:54,971 INFO L273 TraceCheckUtils]: 27: Hoare triple {12318#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,972 INFO L273 TraceCheckUtils]: 28: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,972 INFO L273 TraceCheckUtils]: 29: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,972 INFO L273 TraceCheckUtils]: 30: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,973 INFO L273 TraceCheckUtils]: 31: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,973 INFO L273 TraceCheckUtils]: 32: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,973 INFO L273 TraceCheckUtils]: 33: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,973 INFO L273 TraceCheckUtils]: 34: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,974 INFO L273 TraceCheckUtils]: 35: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,974 INFO L273 TraceCheckUtils]: 36: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,974 INFO L273 TraceCheckUtils]: 37: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,975 INFO L273 TraceCheckUtils]: 38: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,975 INFO L273 TraceCheckUtils]: 39: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:08:54,976 INFO L273 TraceCheckUtils]: 40: Hoare triple {12320#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {12321#(= |ssl3_accept_#t~mem31| 8496)} is VALID [2018-11-14 19:08:54,977 INFO L273 TraceCheckUtils]: 41: Hoare triple {12321#(= |ssl3_accept_#t~mem31| 8496)} assume #t~mem31 == 8482;havoc #t~mem31; {12319#false} is VALID [2018-11-14 19:08:54,977 INFO L273 TraceCheckUtils]: 42: Hoare triple {12319#false} call write~int(3, ~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,977 INFO L273 TraceCheckUtils]: 43: Hoare triple {12319#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {12319#false} is VALID [2018-11-14 19:08:54,977 INFO L273 TraceCheckUtils]: 44: Hoare triple {12319#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {12319#false} is VALID [2018-11-14 19:08:54,978 INFO L273 TraceCheckUtils]: 45: Hoare triple {12319#false} ~skip~0 := 0; {12319#false} is VALID [2018-11-14 19:08:54,978 INFO L273 TraceCheckUtils]: 46: Hoare triple {12319#false} assume true; {12319#false} is VALID [2018-11-14 19:08:54,978 INFO L273 TraceCheckUtils]: 47: Hoare triple {12319#false} assume !false; {12319#false} is VALID [2018-11-14 19:08:54,978 INFO L273 TraceCheckUtils]: 48: Hoare triple {12319#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,978 INFO L273 TraceCheckUtils]: 49: Hoare triple {12319#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,979 INFO L273 TraceCheckUtils]: 50: Hoare triple {12319#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,979 INFO L273 TraceCheckUtils]: 51: Hoare triple {12319#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,979 INFO L273 TraceCheckUtils]: 52: Hoare triple {12319#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,979 INFO L273 TraceCheckUtils]: 53: Hoare triple {12319#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,979 INFO L273 TraceCheckUtils]: 54: Hoare triple {12319#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 55: Hoare triple {12319#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 56: Hoare triple {12319#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 57: Hoare triple {12319#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 58: Hoare triple {12319#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 59: Hoare triple {12319#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 60: Hoare triple {12319#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 61: Hoare triple {12319#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,980 INFO L273 TraceCheckUtils]: 62: Hoare triple {12319#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 63: Hoare triple {12319#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 64: Hoare triple {12319#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 65: Hoare triple {12319#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 66: Hoare triple {12319#false} assume #t~mem41 == 8544;havoc #t~mem41; {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 67: Hoare triple {12319#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 68: Hoare triple {12319#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 69: Hoare triple {12319#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {12319#false} is VALID [2018-11-14 19:08:54,981 INFO L273 TraceCheckUtils]: 70: Hoare triple {12319#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {12319#false} is VALID [2018-11-14 19:08:54,982 INFO L273 TraceCheckUtils]: 71: Hoare triple {12319#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {12319#false} is VALID [2018-11-14 19:08:54,982 INFO L273 TraceCheckUtils]: 72: Hoare triple {12319#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {12319#false} is VALID [2018-11-14 19:08:54,982 INFO L273 TraceCheckUtils]: 73: Hoare triple {12319#false} assume ~blastFlag~0 == 8; {12319#false} is VALID [2018-11-14 19:08:54,982 INFO L273 TraceCheckUtils]: 74: Hoare triple {12319#false} assume !false; {12319#false} is VALID [2018-11-14 19:08:54,986 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:08:54,986 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:54,986 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:08:54,987 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-14 19:08:54,987 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:54,987 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:08:55,062 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:55,062 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:08:55,062 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:08:55,062 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:08:55,063 INFO L87 Difference]: Start difference. First operand 194 states and 290 transitions. Second operand 4 states. [2018-11-14 19:08:56,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:56,246 INFO L93 Difference]: Finished difference Result 380 states and 575 transitions. [2018-11-14 19:08:56,246 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:08:56,246 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-14 19:08:56,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:56,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:56,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 472 transitions. [2018-11-14 19:08:56,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:08:56,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 472 transitions. [2018-11-14 19:08:56,252 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 472 transitions. [2018-11-14 19:08:56,672 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 472 edges. 472 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:56,677 INFO L225 Difference]: With dead ends: 380 [2018-11-14 19:08:56,677 INFO L226 Difference]: Without dead ends: 212 [2018-11-14 19:08:56,677 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:56,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2018-11-14 19:08:56,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 194. [2018-11-14 19:08:56,699 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:56,699 INFO L82 GeneralOperation]: Start isEquivalent. First operand 212 states. Second operand 194 states. [2018-11-14 19:08:56,699 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand 194 states. [2018-11-14 19:08:56,700 INFO L87 Difference]: Start difference. First operand 212 states. Second operand 194 states. [2018-11-14 19:08:56,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:56,704 INFO L93 Difference]: Finished difference Result 212 states and 313 transitions. [2018-11-14 19:08:56,704 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 313 transitions. [2018-11-14 19:08:56,704 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:56,705 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:56,705 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 212 states. [2018-11-14 19:08:56,705 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 212 states. [2018-11-14 19:08:56,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:56,709 INFO L93 Difference]: Finished difference Result 212 states and 313 transitions. [2018-11-14 19:08:56,710 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 313 transitions. [2018-11-14 19:08:56,710 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:56,710 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:56,710 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:56,710 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:56,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-14 19:08:56,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 289 transitions. [2018-11-14 19:08:56,715 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 289 transitions. Word has length 75 [2018-11-14 19:08:56,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:56,715 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 289 transitions. [2018-11-14 19:08:56,715 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:08:56,715 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 289 transitions. [2018-11-14 19:08:56,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2018-11-14 19:08:56,716 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:56,716 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:56,717 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:56,717 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:56,717 INFO L82 PathProgramCache]: Analyzing trace with hash 648182387, now seen corresponding path program 1 times [2018-11-14 19:08:56,717 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:56,717 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:56,718 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:56,718 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:56,718 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:56,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:08:57,512 INFO L256 TraceCheckUtils]: 0: Hoare triple {13423#true} call ULTIMATE.init(); {13423#true} is VALID [2018-11-14 19:08:57,512 INFO L273 TraceCheckUtils]: 1: Hoare triple {13423#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {13423#true} is VALID [2018-11-14 19:08:57,513 INFO L273 TraceCheckUtils]: 2: Hoare triple {13423#true} assume true; {13423#true} is VALID [2018-11-14 19:08:57,513 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13423#true} {13423#true} #682#return; {13423#true} is VALID [2018-11-14 19:08:57,513 INFO L256 TraceCheckUtils]: 4: Hoare triple {13423#true} call #t~ret138 := main(); {13423#true} is VALID [2018-11-14 19:08:57,513 INFO L273 TraceCheckUtils]: 5: Hoare triple {13423#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {13423#true} is VALID [2018-11-14 19:08:57,514 INFO L256 TraceCheckUtils]: 6: Hoare triple {13423#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {13423#true} is VALID [2018-11-14 19:08:57,514 INFO L273 TraceCheckUtils]: 7: Hoare triple {13423#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {13423#true} is VALID [2018-11-14 19:08:57,514 INFO L273 TraceCheckUtils]: 8: Hoare triple {13423#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {13423#true} is VALID [2018-11-14 19:08:57,514 INFO L273 TraceCheckUtils]: 9: Hoare triple {13423#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {13423#true} is VALID [2018-11-14 19:08:57,514 INFO L273 TraceCheckUtils]: 10: Hoare triple {13423#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 11: Hoare triple {13423#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 12: Hoare triple {13423#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 13: Hoare triple {13423#true} assume true; {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 14: Hoare triple {13423#true} assume !false; {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 15: Hoare triple {13423#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 16: Hoare triple {13423#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 17: Hoare triple {13423#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,515 INFO L273 TraceCheckUtils]: 18: Hoare triple {13423#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 19: Hoare triple {13423#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 20: Hoare triple {13423#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 21: Hoare triple {13423#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 22: Hoare triple {13423#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 23: Hoare triple {13423#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 24: Hoare triple {13423#true} assume #t~mem32 == 8464;havoc #t~mem32; {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 25: Hoare triple {13423#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 26: Hoare triple {13423#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {13423#true} is VALID [2018-11-14 19:08:57,516 INFO L273 TraceCheckUtils]: 27: Hoare triple {13423#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {13423#true} is VALID [2018-11-14 19:08:57,517 INFO L273 TraceCheckUtils]: 28: Hoare triple {13423#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {13423#true} is VALID [2018-11-14 19:08:57,517 INFO L273 TraceCheckUtils]: 29: Hoare triple {13423#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13423#true} is VALID [2018-11-14 19:08:57,517 INFO L273 TraceCheckUtils]: 30: Hoare triple {13423#true} ~skip~0 := 0; {13423#true} is VALID [2018-11-14 19:08:57,517 INFO L273 TraceCheckUtils]: 31: Hoare triple {13423#true} assume true; {13423#true} is VALID [2018-11-14 19:08:57,517 INFO L273 TraceCheckUtils]: 32: Hoare triple {13423#true} assume !false; {13423#true} is VALID [2018-11-14 19:08:57,518 INFO L273 TraceCheckUtils]: 33: Hoare triple {13423#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {13425#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) |ssl3_accept_#t~mem24|)} is VALID [2018-11-14 19:08:57,518 INFO L273 TraceCheckUtils]: 34: Hoare triple {13425#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) |ssl3_accept_#t~mem24|)} assume #t~mem24 == 12292;havoc #t~mem24; {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,519 INFO L273 TraceCheckUtils]: 35: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call write~int(1, ~s.base, ~s.offset + 40, 4); {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,519 INFO L273 TraceCheckUtils]: 36: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call write~int(1, ~s.base, ~s.offset + 36, 4); {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,520 INFO L273 TraceCheckUtils]: 37: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,520 INFO L273 TraceCheckUtils]: 38: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,521 INFO L273 TraceCheckUtils]: 39: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,521 INFO L273 TraceCheckUtils]: 40: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:08:57,522 INFO L273 TraceCheckUtils]: 41: Hoare triple {13426#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {13427#(= 12292 |ssl3_accept_#t~mem62|)} is VALID [2018-11-14 19:08:57,523 INFO L273 TraceCheckUtils]: 42: Hoare triple {13427#(= 12292 |ssl3_accept_#t~mem62|)} assume #t~mem62 != 12292;havoc #t~mem62; {13424#false} is VALID [2018-11-14 19:08:57,523 INFO L273 TraceCheckUtils]: 43: Hoare triple {13424#false} assume !(~tmp___5~0 == 0);call write~int(8464, ~s.base, ~s.offset + 52, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem64 := read~int(#t~mem63.base, #t~mem63.offset + 60 + 12, 4);call write~int(#t~mem64 + 1, #t~mem63.base, #t~mem63.offset + 60 + 12, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {13424#false} is VALID [2018-11-14 19:08:57,523 INFO L273 TraceCheckUtils]: 44: Hoare triple {13424#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {13424#false} is VALID [2018-11-14 19:08:57,524 INFO L273 TraceCheckUtils]: 45: Hoare triple {13424#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13424#false} is VALID [2018-11-14 19:08:57,524 INFO L273 TraceCheckUtils]: 46: Hoare triple {13424#false} ~skip~0 := 0; {13424#false} is VALID [2018-11-14 19:08:57,524 INFO L273 TraceCheckUtils]: 47: Hoare triple {13424#false} assume true; {13424#false} is VALID [2018-11-14 19:08:57,524 INFO L273 TraceCheckUtils]: 48: Hoare triple {13424#false} assume !false; {13424#false} is VALID [2018-11-14 19:08:57,524 INFO L273 TraceCheckUtils]: 49: Hoare triple {13424#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,525 INFO L273 TraceCheckUtils]: 50: Hoare triple {13424#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,525 INFO L273 TraceCheckUtils]: 51: Hoare triple {13424#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,525 INFO L273 TraceCheckUtils]: 52: Hoare triple {13424#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,525 INFO L273 TraceCheckUtils]: 53: Hoare triple {13424#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,525 INFO L273 TraceCheckUtils]: 54: Hoare triple {13424#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 55: Hoare triple {13424#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 56: Hoare triple {13424#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 57: Hoare triple {13424#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 58: Hoare triple {13424#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 59: Hoare triple {13424#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 60: Hoare triple {13424#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 61: Hoare triple {13424#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 62: Hoare triple {13424#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,526 INFO L273 TraceCheckUtils]: 63: Hoare triple {13424#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 64: Hoare triple {13424#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 65: Hoare triple {13424#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 66: Hoare triple {13424#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 67: Hoare triple {13424#false} assume #t~mem41 == 8544;havoc #t~mem41; {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 68: Hoare triple {13424#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 69: Hoare triple {13424#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 70: Hoare triple {13424#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {13424#false} is VALID [2018-11-14 19:08:57,527 INFO L273 TraceCheckUtils]: 71: Hoare triple {13424#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {13424#false} is VALID [2018-11-14 19:08:57,528 INFO L273 TraceCheckUtils]: 72: Hoare triple {13424#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {13424#false} is VALID [2018-11-14 19:08:57,528 INFO L273 TraceCheckUtils]: 73: Hoare triple {13424#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {13424#false} is VALID [2018-11-14 19:08:57,528 INFO L273 TraceCheckUtils]: 74: Hoare triple {13424#false} assume ~blastFlag~0 == 8; {13424#false} is VALID [2018-11-14 19:08:57,528 INFO L273 TraceCheckUtils]: 75: Hoare triple {13424#false} assume !false; {13424#false} is VALID [2018-11-14 19:08:57,531 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-14 19:08:57,531 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:08:57,531 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-14 19:08:57,532 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 76 [2018-11-14 19:08:57,532 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:08:57,532 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-14 19:08:57,605 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:57,605 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-14 19:08:57,605 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-14 19:08:57,606 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:08:57,606 INFO L87 Difference]: Start difference. First operand 194 states and 289 transitions. Second operand 5 states. [2018-11-14 19:08:59,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:59,454 INFO L93 Difference]: Finished difference Result 371 states and 561 transitions. [2018-11-14 19:08:59,454 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-14 19:08:59,455 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 76 [2018-11-14 19:08:59,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:08:59,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-14 19:08:59,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 423 transitions. [2018-11-14 19:08:59,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-14 19:08:59,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 423 transitions. [2018-11-14 19:08:59,461 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 423 transitions. [2018-11-14 19:08:59,847 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 423 edges. 423 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:08:59,852 INFO L225 Difference]: With dead ends: 371 [2018-11-14 19:08:59,853 INFO L226 Difference]: Without dead ends: 203 [2018-11-14 19:08:59,853 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-14 19:08:59,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2018-11-14 19:08:59,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 203. [2018-11-14 19:08:59,899 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:08:59,899 INFO L82 GeneralOperation]: Start isEquivalent. First operand 203 states. Second operand 203 states. [2018-11-14 19:08:59,899 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 203 states. [2018-11-14 19:08:59,900 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 203 states. [2018-11-14 19:08:59,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:59,904 INFO L93 Difference]: Finished difference Result 203 states and 300 transitions. [2018-11-14 19:08:59,904 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 300 transitions. [2018-11-14 19:08:59,904 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:59,904 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:59,904 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 203 states. [2018-11-14 19:08:59,904 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 203 states. [2018-11-14 19:08:59,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:08:59,908 INFO L93 Difference]: Finished difference Result 203 states and 300 transitions. [2018-11-14 19:08:59,908 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 300 transitions. [2018-11-14 19:08:59,908 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:08:59,908 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:08:59,909 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:08:59,909 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:08:59,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-11-14 19:08:59,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 300 transitions. [2018-11-14 19:08:59,912 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 300 transitions. Word has length 76 [2018-11-14 19:08:59,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:08:59,912 INFO L480 AbstractCegarLoop]: Abstraction has 203 states and 300 transitions. [2018-11-14 19:08:59,912 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-14 19:08:59,912 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 300 transitions. [2018-11-14 19:08:59,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2018-11-14 19:08:59,913 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:08:59,913 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:08:59,913 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:08:59,914 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:08:59,914 INFO L82 PathProgramCache]: Analyzing trace with hash -753904121, now seen corresponding path program 1 times [2018-11-14 19:08:59,914 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:08:59,914 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:08:59,915 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:59,915 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:08:59,915 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:08:59,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:00,077 INFO L256 TraceCheckUtils]: 0: Hoare triple {14509#true} call ULTIMATE.init(); {14509#true} is VALID [2018-11-14 19:09:00,077 INFO L273 TraceCheckUtils]: 1: Hoare triple {14509#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {14509#true} is VALID [2018-11-14 19:09:00,077 INFO L273 TraceCheckUtils]: 2: Hoare triple {14509#true} assume true; {14509#true} is VALID [2018-11-14 19:09:00,078 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14509#true} {14509#true} #682#return; {14509#true} is VALID [2018-11-14 19:09:00,078 INFO L256 TraceCheckUtils]: 4: Hoare triple {14509#true} call #t~ret138 := main(); {14509#true} is VALID [2018-11-14 19:09:00,078 INFO L273 TraceCheckUtils]: 5: Hoare triple {14509#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {14509#true} is VALID [2018-11-14 19:09:00,078 INFO L256 TraceCheckUtils]: 6: Hoare triple {14509#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14509#true} is VALID [2018-11-14 19:09:00,078 INFO L273 TraceCheckUtils]: 7: Hoare triple {14509#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 8: Hoare triple {14509#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 9: Hoare triple {14509#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 10: Hoare triple {14509#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 11: Hoare triple {14509#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 12: Hoare triple {14509#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 13: Hoare triple {14509#true} assume true; {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 14: Hoare triple {14509#true} assume !false; {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 15: Hoare triple {14509#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,079 INFO L273 TraceCheckUtils]: 16: Hoare triple {14509#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 17: Hoare triple {14509#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 18: Hoare triple {14509#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 19: Hoare triple {14509#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 20: Hoare triple {14509#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 21: Hoare triple {14509#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 22: Hoare triple {14509#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 23: Hoare triple {14509#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {14509#true} is VALID [2018-11-14 19:09:00,080 INFO L273 TraceCheckUtils]: 24: Hoare triple {14509#true} assume #t~mem32 == 8464;havoc #t~mem32; {14509#true} is VALID [2018-11-14 19:09:00,081 INFO L273 TraceCheckUtils]: 25: Hoare triple {14509#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {14509#true} is VALID [2018-11-14 19:09:00,081 INFO L273 TraceCheckUtils]: 26: Hoare triple {14509#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {14509#true} is VALID [2018-11-14 19:09:00,081 INFO L273 TraceCheckUtils]: 27: Hoare triple {14509#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,082 INFO L273 TraceCheckUtils]: 28: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,082 INFO L273 TraceCheckUtils]: 29: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,082 INFO L273 TraceCheckUtils]: 30: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,083 INFO L273 TraceCheckUtils]: 31: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,083 INFO L273 TraceCheckUtils]: 32: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,083 INFO L273 TraceCheckUtils]: 33: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:00,084 INFO L273 TraceCheckUtils]: 34: Hoare triple {14511#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {14512#(= |ssl3_accept_#t~mem25| 8496)} is VALID [2018-11-14 19:09:00,085 INFO L273 TraceCheckUtils]: 35: Hoare triple {14512#(= |ssl3_accept_#t~mem25| 8496)} assume #t~mem25 == 16384;havoc #t~mem25; {14510#false} is VALID [2018-11-14 19:09:00,085 INFO L273 TraceCheckUtils]: 36: Hoare triple {14510#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {14510#false} is VALID [2018-11-14 19:09:00,085 INFO L273 TraceCheckUtils]: 37: Hoare triple {14510#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {14510#false} is VALID [2018-11-14 19:09:00,085 INFO L273 TraceCheckUtils]: 38: Hoare triple {14510#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {14510#false} is VALID [2018-11-14 19:09:00,086 INFO L273 TraceCheckUtils]: 39: Hoare triple {14510#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {14510#false} is VALID [2018-11-14 19:09:00,086 INFO L273 TraceCheckUtils]: 40: Hoare triple {14510#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {14510#false} is VALID [2018-11-14 19:09:00,086 INFO L273 TraceCheckUtils]: 41: Hoare triple {14510#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,086 INFO L273 TraceCheckUtils]: 42: Hoare triple {14510#false} assume #t~mem62 != 12292;havoc #t~mem62; {14510#false} is VALID [2018-11-14 19:09:00,086 INFO L273 TraceCheckUtils]: 43: Hoare triple {14510#false} assume !(~tmp___5~0 == 0);call write~int(8464, ~s.base, ~s.offset + 52, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem64 := read~int(#t~mem63.base, #t~mem63.offset + 60 + 12, 4);call write~int(#t~mem64 + 1, #t~mem63.base, #t~mem63.offset + 60 + 12, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {14510#false} is VALID [2018-11-14 19:09:00,087 INFO L273 TraceCheckUtils]: 44: Hoare triple {14510#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {14510#false} is VALID [2018-11-14 19:09:00,087 INFO L273 TraceCheckUtils]: 45: Hoare triple {14510#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14510#false} is VALID [2018-11-14 19:09:00,087 INFO L273 TraceCheckUtils]: 46: Hoare triple {14510#false} ~skip~0 := 0; {14510#false} is VALID [2018-11-14 19:09:00,087 INFO L273 TraceCheckUtils]: 47: Hoare triple {14510#false} assume true; {14510#false} is VALID [2018-11-14 19:09:00,087 INFO L273 TraceCheckUtils]: 48: Hoare triple {14510#false} assume !false; {14510#false} is VALID [2018-11-14 19:09:00,087 INFO L273 TraceCheckUtils]: 49: Hoare triple {14510#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 50: Hoare triple {14510#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 51: Hoare triple {14510#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 52: Hoare triple {14510#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 53: Hoare triple {14510#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 54: Hoare triple {14510#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 55: Hoare triple {14510#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 56: Hoare triple {14510#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,088 INFO L273 TraceCheckUtils]: 57: Hoare triple {14510#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 58: Hoare triple {14510#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 59: Hoare triple {14510#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 60: Hoare triple {14510#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 61: Hoare triple {14510#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 62: Hoare triple {14510#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 63: Hoare triple {14510#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 64: Hoare triple {14510#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 65: Hoare triple {14510#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,089 INFO L273 TraceCheckUtils]: 66: Hoare triple {14510#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 67: Hoare triple {14510#false} assume #t~mem41 == 8544;havoc #t~mem41; {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 68: Hoare triple {14510#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 69: Hoare triple {14510#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 70: Hoare triple {14510#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 71: Hoare triple {14510#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 72: Hoare triple {14510#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 73: Hoare triple {14510#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {14510#false} is VALID [2018-11-14 19:09:00,090 INFO L273 TraceCheckUtils]: 74: Hoare triple {14510#false} assume ~blastFlag~0 == 8; {14510#false} is VALID [2018-11-14 19:09:00,091 INFO L273 TraceCheckUtils]: 75: Hoare triple {14510#false} assume !false; {14510#false} is VALID [2018-11-14 19:09:00,094 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:09:00,094 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:00,094 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:09:00,095 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-14 19:09:00,095 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:00,095 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:09:00,167 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:00,167 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:09:00,167 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:09:00,167 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:09:00,168 INFO L87 Difference]: Start difference. First operand 203 states and 300 transitions. Second operand 4 states. [2018-11-14 19:09:01,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:01,485 INFO L93 Difference]: Finished difference Result 407 states and 606 transitions. [2018-11-14 19:09:01,486 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:09:01,486 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-14 19:09:01,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:01,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:01,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-14 19:09:01,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:01,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-14 19:09:01,490 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 471 transitions. [2018-11-14 19:09:01,994 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 471 edges. 471 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:01,999 INFO L225 Difference]: With dead ends: 407 [2018-11-14 19:09:01,999 INFO L226 Difference]: Without dead ends: 230 [2018-11-14 19:09:01,999 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:09:02,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2018-11-14 19:09:02,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 203. [2018-11-14 19:09:02,055 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:02,055 INFO L82 GeneralOperation]: Start isEquivalent. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:02,055 INFO L74 IsIncluded]: Start isIncluded. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:02,055 INFO L87 Difference]: Start difference. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:02,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:02,061 INFO L93 Difference]: Finished difference Result 230 states and 334 transitions. [2018-11-14 19:09:02,061 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 334 transitions. [2018-11-14 19:09:02,061 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:02,061 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:02,062 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 230 states. [2018-11-14 19:09:02,064 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 230 states. [2018-11-14 19:09:02,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:02,069 INFO L93 Difference]: Finished difference Result 230 states and 334 transitions. [2018-11-14 19:09:02,069 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 334 transitions. [2018-11-14 19:09:02,070 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:02,070 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:02,070 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:02,071 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:02,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-11-14 19:09:02,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 299 transitions. [2018-11-14 19:09:02,075 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 299 transitions. Word has length 76 [2018-11-14 19:09:02,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:02,076 INFO L480 AbstractCegarLoop]: Abstraction has 203 states and 299 transitions. [2018-11-14 19:09:02,076 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:09:02,076 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 299 transitions. [2018-11-14 19:09:02,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-14 19:09:02,077 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:02,077 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:02,077 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:02,078 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:02,078 INFO L82 PathProgramCache]: Analyzing trace with hash 1094071992, now seen corresponding path program 1 times [2018-11-14 19:09:02,078 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:02,078 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:02,080 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:02,080 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:02,080 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:02,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:02,272 INFO L256 TraceCheckUtils]: 0: Hoare triple {15690#true} call ULTIMATE.init(); {15690#true} is VALID [2018-11-14 19:09:02,272 INFO L273 TraceCheckUtils]: 1: Hoare triple {15690#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {15690#true} is VALID [2018-11-14 19:09:02,272 INFO L273 TraceCheckUtils]: 2: Hoare triple {15690#true} assume true; {15690#true} is VALID [2018-11-14 19:09:02,273 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15690#true} {15690#true} #682#return; {15690#true} is VALID [2018-11-14 19:09:02,273 INFO L256 TraceCheckUtils]: 4: Hoare triple {15690#true} call #t~ret138 := main(); {15690#true} is VALID [2018-11-14 19:09:02,273 INFO L273 TraceCheckUtils]: 5: Hoare triple {15690#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {15690#true} is VALID [2018-11-14 19:09:02,273 INFO L256 TraceCheckUtils]: 6: Hoare triple {15690#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {15690#true} is VALID [2018-11-14 19:09:02,273 INFO L273 TraceCheckUtils]: 7: Hoare triple {15690#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {15690#true} is VALID [2018-11-14 19:09:02,274 INFO L273 TraceCheckUtils]: 8: Hoare triple {15690#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {15690#true} is VALID [2018-11-14 19:09:02,274 INFO L273 TraceCheckUtils]: 9: Hoare triple {15690#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {15690#true} is VALID [2018-11-14 19:09:02,274 INFO L273 TraceCheckUtils]: 10: Hoare triple {15690#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {15690#true} is VALID [2018-11-14 19:09:02,274 INFO L273 TraceCheckUtils]: 11: Hoare triple {15690#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {15690#true} is VALID [2018-11-14 19:09:02,274 INFO L273 TraceCheckUtils]: 12: Hoare triple {15690#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {15690#true} is VALID [2018-11-14 19:09:02,274 INFO L273 TraceCheckUtils]: 13: Hoare triple {15690#true} assume true; {15690#true} is VALID [2018-11-14 19:09:02,275 INFO L273 TraceCheckUtils]: 14: Hoare triple {15690#true} assume !false; {15690#true} is VALID [2018-11-14 19:09:02,275 INFO L273 TraceCheckUtils]: 15: Hoare triple {15690#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,275 INFO L273 TraceCheckUtils]: 16: Hoare triple {15690#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,275 INFO L273 TraceCheckUtils]: 17: Hoare triple {15690#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,275 INFO L273 TraceCheckUtils]: 18: Hoare triple {15690#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,275 INFO L273 TraceCheckUtils]: 19: Hoare triple {15690#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,277 INFO L273 TraceCheckUtils]: 20: Hoare triple {15690#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,278 INFO L273 TraceCheckUtils]: 21: Hoare triple {15690#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,278 INFO L273 TraceCheckUtils]: 22: Hoare triple {15690#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,278 INFO L273 TraceCheckUtils]: 23: Hoare triple {15690#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {15690#true} is VALID [2018-11-14 19:09:02,278 INFO L273 TraceCheckUtils]: 24: Hoare triple {15690#true} assume #t~mem32 == 8464;havoc #t~mem32; {15690#true} is VALID [2018-11-14 19:09:02,278 INFO L273 TraceCheckUtils]: 25: Hoare triple {15690#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {15690#true} is VALID [2018-11-14 19:09:02,278 INFO L273 TraceCheckUtils]: 26: Hoare triple {15690#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {15690#true} is VALID [2018-11-14 19:09:02,280 INFO L273 TraceCheckUtils]: 27: Hoare triple {15690#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,280 INFO L273 TraceCheckUtils]: 28: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,280 INFO L273 TraceCheckUtils]: 29: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,281 INFO L273 TraceCheckUtils]: 30: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,281 INFO L273 TraceCheckUtils]: 31: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,282 INFO L273 TraceCheckUtils]: 32: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,282 INFO L273 TraceCheckUtils]: 33: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,282 INFO L273 TraceCheckUtils]: 34: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:02,283 INFO L273 TraceCheckUtils]: 35: Hoare triple {15692#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {15693#(= |ssl3_accept_#t~mem26| 8496)} is VALID [2018-11-14 19:09:02,284 INFO L273 TraceCheckUtils]: 36: Hoare triple {15693#(= |ssl3_accept_#t~mem26| 8496)} assume #t~mem26 == 8192;havoc #t~mem26; {15691#false} is VALID [2018-11-14 19:09:02,284 INFO L273 TraceCheckUtils]: 37: Hoare triple {15691#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {15691#false} is VALID [2018-11-14 19:09:02,284 INFO L273 TraceCheckUtils]: 38: Hoare triple {15691#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {15691#false} is VALID [2018-11-14 19:09:02,285 INFO L273 TraceCheckUtils]: 39: Hoare triple {15691#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {15691#false} is VALID [2018-11-14 19:09:02,285 INFO L273 TraceCheckUtils]: 40: Hoare triple {15691#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {15691#false} is VALID [2018-11-14 19:09:02,285 INFO L273 TraceCheckUtils]: 41: Hoare triple {15691#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {15691#false} is VALID [2018-11-14 19:09:02,285 INFO L273 TraceCheckUtils]: 42: Hoare triple {15691#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,286 INFO L273 TraceCheckUtils]: 43: Hoare triple {15691#false} assume #t~mem62 != 12292;havoc #t~mem62; {15691#false} is VALID [2018-11-14 19:09:02,286 INFO L273 TraceCheckUtils]: 44: Hoare triple {15691#false} assume !(~tmp___5~0 == 0);call write~int(8464, ~s.base, ~s.offset + 52, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem64 := read~int(#t~mem63.base, #t~mem63.offset + 60 + 12, 4);call write~int(#t~mem64 + 1, #t~mem63.base, #t~mem63.offset + 60 + 12, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {15691#false} is VALID [2018-11-14 19:09:02,286 INFO L273 TraceCheckUtils]: 45: Hoare triple {15691#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {15691#false} is VALID [2018-11-14 19:09:02,286 INFO L273 TraceCheckUtils]: 46: Hoare triple {15691#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15691#false} is VALID [2018-11-14 19:09:02,287 INFO L273 TraceCheckUtils]: 47: Hoare triple {15691#false} ~skip~0 := 0; {15691#false} is VALID [2018-11-14 19:09:02,287 INFO L273 TraceCheckUtils]: 48: Hoare triple {15691#false} assume true; {15691#false} is VALID [2018-11-14 19:09:02,287 INFO L273 TraceCheckUtils]: 49: Hoare triple {15691#false} assume !false; {15691#false} is VALID [2018-11-14 19:09:02,287 INFO L273 TraceCheckUtils]: 50: Hoare triple {15691#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 51: Hoare triple {15691#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 52: Hoare triple {15691#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 53: Hoare triple {15691#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 54: Hoare triple {15691#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 55: Hoare triple {15691#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 56: Hoare triple {15691#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,288 INFO L273 TraceCheckUtils]: 57: Hoare triple {15691#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,289 INFO L273 TraceCheckUtils]: 58: Hoare triple {15691#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,289 INFO L273 TraceCheckUtils]: 59: Hoare triple {15691#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,289 INFO L273 TraceCheckUtils]: 60: Hoare triple {15691#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,289 INFO L273 TraceCheckUtils]: 61: Hoare triple {15691#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,289 INFO L273 TraceCheckUtils]: 62: Hoare triple {15691#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,289 INFO L273 TraceCheckUtils]: 63: Hoare triple {15691#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 64: Hoare triple {15691#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 65: Hoare triple {15691#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 66: Hoare triple {15691#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 67: Hoare triple {15691#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 68: Hoare triple {15691#false} assume #t~mem41 == 8544;havoc #t~mem41; {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 69: Hoare triple {15691#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {15691#false} is VALID [2018-11-14 19:09:02,290 INFO L273 TraceCheckUtils]: 70: Hoare triple {15691#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {15691#false} is VALID [2018-11-14 19:09:02,291 INFO L273 TraceCheckUtils]: 71: Hoare triple {15691#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {15691#false} is VALID [2018-11-14 19:09:02,291 INFO L273 TraceCheckUtils]: 72: Hoare triple {15691#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {15691#false} is VALID [2018-11-14 19:09:02,291 INFO L273 TraceCheckUtils]: 73: Hoare triple {15691#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {15691#false} is VALID [2018-11-14 19:09:02,291 INFO L273 TraceCheckUtils]: 74: Hoare triple {15691#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {15691#false} is VALID [2018-11-14 19:09:02,291 INFO L273 TraceCheckUtils]: 75: Hoare triple {15691#false} assume ~blastFlag~0 == 8; {15691#false} is VALID [2018-11-14 19:09:02,291 INFO L273 TraceCheckUtils]: 76: Hoare triple {15691#false} assume !false; {15691#false} is VALID [2018-11-14 19:09:02,297 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:09:02,298 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:02,298 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:09:02,299 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 77 [2018-11-14 19:09:02,299 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:02,299 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:09:02,392 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:02,392 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:09:02,393 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:09:02,393 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:09:02,393 INFO L87 Difference]: Start difference. First operand 203 states and 299 transitions. Second operand 4 states. [2018-11-14 19:09:04,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:04,008 INFO L93 Difference]: Finished difference Result 407 states and 604 transitions. [2018-11-14 19:09:04,008 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:09:04,008 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 77 [2018-11-14 19:09:04,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:04,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:04,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 470 transitions. [2018-11-14 19:09:04,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:04,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 470 transitions. [2018-11-14 19:09:04,012 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 470 transitions. [2018-11-14 19:09:04,430 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 470 edges. 470 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:04,435 INFO L225 Difference]: With dead ends: 407 [2018-11-14 19:09:04,435 INFO L226 Difference]: Without dead ends: 230 [2018-11-14 19:09:04,436 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:09:04,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2018-11-14 19:09:04,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 203. [2018-11-14 19:09:04,790 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:04,790 INFO L82 GeneralOperation]: Start isEquivalent. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:04,791 INFO L74 IsIncluded]: Start isIncluded. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:04,791 INFO L87 Difference]: Start difference. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:04,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:04,795 INFO L93 Difference]: Finished difference Result 230 states and 333 transitions. [2018-11-14 19:09:04,795 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 333 transitions. [2018-11-14 19:09:04,795 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:04,795 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:04,795 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 230 states. [2018-11-14 19:09:04,795 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 230 states. [2018-11-14 19:09:04,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:04,801 INFO L93 Difference]: Finished difference Result 230 states and 333 transitions. [2018-11-14 19:09:04,801 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 333 transitions. [2018-11-14 19:09:04,803 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:04,803 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:04,803 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:04,803 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:04,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-11-14 19:09:04,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 298 transitions. [2018-11-14 19:09:04,807 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 298 transitions. Word has length 77 [2018-11-14 19:09:04,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:04,807 INFO L480 AbstractCegarLoop]: Abstraction has 203 states and 298 transitions. [2018-11-14 19:09:04,807 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:09:04,807 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 298 transitions. [2018-11-14 19:09:04,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-14 19:09:04,808 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:04,808 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:04,808 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:04,808 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:04,809 INFO L82 PathProgramCache]: Analyzing trace with hash 1458389804, now seen corresponding path program 1 times [2018-11-14 19:09:04,809 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:04,809 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:04,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:04,810 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:04,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:04,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:04,984 INFO L256 TraceCheckUtils]: 0: Hoare triple {16871#true} call ULTIMATE.init(); {16871#true} is VALID [2018-11-14 19:09:04,985 INFO L273 TraceCheckUtils]: 1: Hoare triple {16871#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {16871#true} is VALID [2018-11-14 19:09:04,985 INFO L273 TraceCheckUtils]: 2: Hoare triple {16871#true} assume true; {16871#true} is VALID [2018-11-14 19:09:04,985 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16871#true} {16871#true} #682#return; {16871#true} is VALID [2018-11-14 19:09:04,985 INFO L256 TraceCheckUtils]: 4: Hoare triple {16871#true} call #t~ret138 := main(); {16871#true} is VALID [2018-11-14 19:09:04,985 INFO L273 TraceCheckUtils]: 5: Hoare triple {16871#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {16871#true} is VALID [2018-11-14 19:09:04,986 INFO L256 TraceCheckUtils]: 6: Hoare triple {16871#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {16871#true} is VALID [2018-11-14 19:09:04,986 INFO L273 TraceCheckUtils]: 7: Hoare triple {16871#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {16871#true} is VALID [2018-11-14 19:09:04,986 INFO L273 TraceCheckUtils]: 8: Hoare triple {16871#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {16871#true} is VALID [2018-11-14 19:09:04,986 INFO L273 TraceCheckUtils]: 9: Hoare triple {16871#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {16871#true} is VALID [2018-11-14 19:09:04,987 INFO L273 TraceCheckUtils]: 10: Hoare triple {16871#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {16871#true} is VALID [2018-11-14 19:09:04,987 INFO L273 TraceCheckUtils]: 11: Hoare triple {16871#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {16871#true} is VALID [2018-11-14 19:09:04,987 INFO L273 TraceCheckUtils]: 12: Hoare triple {16871#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {16871#true} is VALID [2018-11-14 19:09:04,987 INFO L273 TraceCheckUtils]: 13: Hoare triple {16871#true} assume true; {16871#true} is VALID [2018-11-14 19:09:04,987 INFO L273 TraceCheckUtils]: 14: Hoare triple {16871#true} assume !false; {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 15: Hoare triple {16871#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 16: Hoare triple {16871#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 17: Hoare triple {16871#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 18: Hoare triple {16871#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 19: Hoare triple {16871#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 20: Hoare triple {16871#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 21: Hoare triple {16871#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,988 INFO L273 TraceCheckUtils]: 22: Hoare triple {16871#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,989 INFO L273 TraceCheckUtils]: 23: Hoare triple {16871#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {16871#true} is VALID [2018-11-14 19:09:04,989 INFO L273 TraceCheckUtils]: 24: Hoare triple {16871#true} assume #t~mem32 == 8464;havoc #t~mem32; {16871#true} is VALID [2018-11-14 19:09:04,989 INFO L273 TraceCheckUtils]: 25: Hoare triple {16871#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {16871#true} is VALID [2018-11-14 19:09:04,989 INFO L273 TraceCheckUtils]: 26: Hoare triple {16871#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {16871#true} is VALID [2018-11-14 19:09:04,990 INFO L273 TraceCheckUtils]: 27: Hoare triple {16871#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,990 INFO L273 TraceCheckUtils]: 28: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,990 INFO L273 TraceCheckUtils]: 29: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,991 INFO L273 TraceCheckUtils]: 30: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,991 INFO L273 TraceCheckUtils]: 31: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,991 INFO L273 TraceCheckUtils]: 32: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,992 INFO L273 TraceCheckUtils]: 33: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,992 INFO L273 TraceCheckUtils]: 34: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,992 INFO L273 TraceCheckUtils]: 35: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:04,993 INFO L273 TraceCheckUtils]: 36: Hoare triple {16873#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {16874#(= |ssl3_accept_#t~mem27| 8496)} is VALID [2018-11-14 19:09:04,993 INFO L273 TraceCheckUtils]: 37: Hoare triple {16874#(= |ssl3_accept_#t~mem27| 8496)} assume #t~mem27 == 24576;havoc #t~mem27; {16872#false} is VALID [2018-11-14 19:09:04,994 INFO L273 TraceCheckUtils]: 38: Hoare triple {16872#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {16872#false} is VALID [2018-11-14 19:09:04,994 INFO L273 TraceCheckUtils]: 39: Hoare triple {16872#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {16872#false} is VALID [2018-11-14 19:09:04,994 INFO L273 TraceCheckUtils]: 40: Hoare triple {16872#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {16872#false} is VALID [2018-11-14 19:09:04,994 INFO L273 TraceCheckUtils]: 41: Hoare triple {16872#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {16872#false} is VALID [2018-11-14 19:09:04,994 INFO L273 TraceCheckUtils]: 42: Hoare triple {16872#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {16872#false} is VALID [2018-11-14 19:09:04,995 INFO L273 TraceCheckUtils]: 43: Hoare triple {16872#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,995 INFO L273 TraceCheckUtils]: 44: Hoare triple {16872#false} assume #t~mem62 != 12292;havoc #t~mem62; {16872#false} is VALID [2018-11-14 19:09:04,995 INFO L273 TraceCheckUtils]: 45: Hoare triple {16872#false} assume !(~tmp___5~0 == 0);call write~int(8464, ~s.base, ~s.offset + 52, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem64 := read~int(#t~mem63.base, #t~mem63.offset + 60 + 12, 4);call write~int(#t~mem64 + 1, #t~mem63.base, #t~mem63.offset + 60 + 12, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {16872#false} is VALID [2018-11-14 19:09:04,995 INFO L273 TraceCheckUtils]: 46: Hoare triple {16872#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {16872#false} is VALID [2018-11-14 19:09:04,996 INFO L273 TraceCheckUtils]: 47: Hoare triple {16872#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16872#false} is VALID [2018-11-14 19:09:04,996 INFO L273 TraceCheckUtils]: 48: Hoare triple {16872#false} ~skip~0 := 0; {16872#false} is VALID [2018-11-14 19:09:04,996 INFO L273 TraceCheckUtils]: 49: Hoare triple {16872#false} assume true; {16872#false} is VALID [2018-11-14 19:09:04,996 INFO L273 TraceCheckUtils]: 50: Hoare triple {16872#false} assume !false; {16872#false} is VALID [2018-11-14 19:09:04,996 INFO L273 TraceCheckUtils]: 51: Hoare triple {16872#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 52: Hoare triple {16872#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 53: Hoare triple {16872#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 54: Hoare triple {16872#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 55: Hoare triple {16872#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 56: Hoare triple {16872#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 57: Hoare triple {16872#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 58: Hoare triple {16872#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 59: Hoare triple {16872#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,997 INFO L273 TraceCheckUtils]: 60: Hoare triple {16872#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 61: Hoare triple {16872#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 62: Hoare triple {16872#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 63: Hoare triple {16872#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 64: Hoare triple {16872#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 65: Hoare triple {16872#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 66: Hoare triple {16872#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,998 INFO L273 TraceCheckUtils]: 67: Hoare triple {16872#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,999 INFO L273 TraceCheckUtils]: 68: Hoare triple {16872#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {16872#false} is VALID [2018-11-14 19:09:04,999 INFO L273 TraceCheckUtils]: 69: Hoare triple {16872#false} assume #t~mem41 == 8544;havoc #t~mem41; {16872#false} is VALID [2018-11-14 19:09:04,999 INFO L273 TraceCheckUtils]: 70: Hoare triple {16872#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {16872#false} is VALID [2018-11-14 19:09:04,999 INFO L273 TraceCheckUtils]: 71: Hoare triple {16872#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {16872#false} is VALID [2018-11-14 19:09:04,999 INFO L273 TraceCheckUtils]: 72: Hoare triple {16872#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {16872#false} is VALID [2018-11-14 19:09:04,999 INFO L273 TraceCheckUtils]: 73: Hoare triple {16872#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {16872#false} is VALID [2018-11-14 19:09:05,000 INFO L273 TraceCheckUtils]: 74: Hoare triple {16872#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {16872#false} is VALID [2018-11-14 19:09:05,000 INFO L273 TraceCheckUtils]: 75: Hoare triple {16872#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {16872#false} is VALID [2018-11-14 19:09:05,000 INFO L273 TraceCheckUtils]: 76: Hoare triple {16872#false} assume ~blastFlag~0 == 8; {16872#false} is VALID [2018-11-14 19:09:05,000 INFO L273 TraceCheckUtils]: 77: Hoare triple {16872#false} assume !false; {16872#false} is VALID [2018-11-14 19:09:05,004 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:09:05,004 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:05,004 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:09:05,004 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-14 19:09:05,005 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:05,005 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:09:05,080 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:05,080 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:09:05,080 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:09:05,080 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:09:05,081 INFO L87 Difference]: Start difference. First operand 203 states and 298 transitions. Second operand 4 states. [2018-11-14 19:09:06,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:06,623 INFO L93 Difference]: Finished difference Result 407 states and 602 transitions. [2018-11-14 19:09:06,623 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:09:06,623 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-14 19:09:06,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:06,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:06,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 469 transitions. [2018-11-14 19:09:06,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:06,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 469 transitions. [2018-11-14 19:09:06,628 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 469 transitions. [2018-11-14 19:09:07,056 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 469 edges. 469 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:07,061 INFO L225 Difference]: With dead ends: 407 [2018-11-14 19:09:07,061 INFO L226 Difference]: Without dead ends: 230 [2018-11-14 19:09:07,062 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:09:07,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2018-11-14 19:09:07,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 203. [2018-11-14 19:09:07,083 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:07,083 INFO L82 GeneralOperation]: Start isEquivalent. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:07,084 INFO L74 IsIncluded]: Start isIncluded. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:07,084 INFO L87 Difference]: Start difference. First operand 230 states. Second operand 203 states. [2018-11-14 19:09:07,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:07,089 INFO L93 Difference]: Finished difference Result 230 states and 332 transitions. [2018-11-14 19:09:07,089 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 332 transitions. [2018-11-14 19:09:07,089 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:07,089 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:07,089 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 230 states. [2018-11-14 19:09:07,089 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 230 states. [2018-11-14 19:09:07,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:07,094 INFO L93 Difference]: Finished difference Result 230 states and 332 transitions. [2018-11-14 19:09:07,094 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 332 transitions. [2018-11-14 19:09:07,095 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:07,095 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:07,095 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:07,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:07,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-11-14 19:09:07,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 297 transitions. [2018-11-14 19:09:07,099 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 297 transitions. Word has length 78 [2018-11-14 19:09:07,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:07,099 INFO L480 AbstractCegarLoop]: Abstraction has 203 states and 297 transitions. [2018-11-14 19:09:07,099 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:09:07,099 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 297 transitions. [2018-11-14 19:09:07,100 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-14 19:09:07,100 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:07,100 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:07,101 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:07,101 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:07,101 INFO L82 PathProgramCache]: Analyzing trace with hash -1221026755, now seen corresponding path program 1 times [2018-11-14 19:09:07,101 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:07,101 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:07,102 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:07,102 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:07,102 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:07,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:07,215 INFO L256 TraceCheckUtils]: 0: Hoare triple {18052#true} call ULTIMATE.init(); {18052#true} is VALID [2018-11-14 19:09:07,216 INFO L273 TraceCheckUtils]: 1: Hoare triple {18052#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {18052#true} is VALID [2018-11-14 19:09:07,216 INFO L273 TraceCheckUtils]: 2: Hoare triple {18052#true} assume true; {18052#true} is VALID [2018-11-14 19:09:07,216 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18052#true} {18052#true} #682#return; {18052#true} is VALID [2018-11-14 19:09:07,217 INFO L256 TraceCheckUtils]: 4: Hoare triple {18052#true} call #t~ret138 := main(); {18052#true} is VALID [2018-11-14 19:09:07,217 INFO L273 TraceCheckUtils]: 5: Hoare triple {18052#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {18052#true} is VALID [2018-11-14 19:09:07,217 INFO L256 TraceCheckUtils]: 6: Hoare triple {18052#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {18052#true} is VALID [2018-11-14 19:09:07,217 INFO L273 TraceCheckUtils]: 7: Hoare triple {18052#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {18052#true} is VALID [2018-11-14 19:09:07,217 INFO L273 TraceCheckUtils]: 8: Hoare triple {18052#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 9: Hoare triple {18052#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 10: Hoare triple {18052#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 11: Hoare triple {18052#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 12: Hoare triple {18052#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 13: Hoare triple {18052#true} assume true; {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 14: Hoare triple {18052#true} assume !false; {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 15: Hoare triple {18052#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,218 INFO L273 TraceCheckUtils]: 16: Hoare triple {18052#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 17: Hoare triple {18052#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 18: Hoare triple {18052#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 19: Hoare triple {18052#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 20: Hoare triple {18052#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 21: Hoare triple {18052#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 22: Hoare triple {18052#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 23: Hoare triple {18052#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {18052#true} is VALID [2018-11-14 19:09:07,219 INFO L273 TraceCheckUtils]: 24: Hoare triple {18052#true} assume #t~mem32 == 8464;havoc #t~mem32; {18052#true} is VALID [2018-11-14 19:09:07,220 INFO L273 TraceCheckUtils]: 25: Hoare triple {18052#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {18052#true} is VALID [2018-11-14 19:09:07,220 INFO L273 TraceCheckUtils]: 26: Hoare triple {18052#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {18052#true} is VALID [2018-11-14 19:09:07,220 INFO L273 TraceCheckUtils]: 27: Hoare triple {18052#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,222 INFO L273 TraceCheckUtils]: 28: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,222 INFO L273 TraceCheckUtils]: 29: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,224 INFO L273 TraceCheckUtils]: 30: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,224 INFO L273 TraceCheckUtils]: 31: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,226 INFO L273 TraceCheckUtils]: 32: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,226 INFO L273 TraceCheckUtils]: 33: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,228 INFO L273 TraceCheckUtils]: 34: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,228 INFO L273 TraceCheckUtils]: 35: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,228 INFO L273 TraceCheckUtils]: 36: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-14 19:09:07,229 INFO L273 TraceCheckUtils]: 37: Hoare triple {18054#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {18055#(= |ssl3_accept_#t~mem28| 8496)} is VALID [2018-11-14 19:09:07,229 INFO L273 TraceCheckUtils]: 38: Hoare triple {18055#(= |ssl3_accept_#t~mem28| 8496)} assume #t~mem28 == 8195;havoc #t~mem28; {18053#false} is VALID [2018-11-14 19:09:07,229 INFO L273 TraceCheckUtils]: 39: Hoare triple {18053#false} call write~int(1, ~s.base, ~s.offset + 36, 4); {18053#false} is VALID [2018-11-14 19:09:07,229 INFO L273 TraceCheckUtils]: 40: Hoare triple {18053#false} assume (~cb~0.base + ~cb~0.offset) % 4294967296 != 0; {18053#false} is VALID [2018-11-14 19:09:07,229 INFO L273 TraceCheckUtils]: 41: Hoare triple {18053#false} call #t~mem59 := read~int(~s.base, ~s.offset + 0, 4); {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 42: Hoare triple {18053#false} assume !(#t~mem59 / 256 != 3);havoc #t~mem59;call write~int(8192, ~s.base, ~s.offset + 4, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, ~s.offset + 60, 4); {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 43: Hoare triple {18053#false} assume !((#t~mem60.base + #t~mem60.offset) % 4294967296 == 0);havoc #t~mem60.base, #t~mem60.offset; {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 44: Hoare triple {18053#false} assume !(~tmp___4~0 == 0);call write~int(0, ~s.base, ~s.offset + 64, 4);call #t~mem62 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 45: Hoare triple {18053#false} assume #t~mem62 != 12292;havoc #t~mem62; {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 46: Hoare triple {18053#false} assume !(~tmp___5~0 == 0);call write~int(8464, ~s.base, ~s.offset + 52, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, ~s.offset + 204, 4);call #t~mem64 := read~int(#t~mem63.base, #t~mem63.offset + 60 + 12, 4);call write~int(#t~mem64 + 1, #t~mem63.base, #t~mem63.offset + 60 + 12, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 47: Hoare triple {18053#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 48: Hoare triple {18053#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18053#false} is VALID [2018-11-14 19:09:07,230 INFO L273 TraceCheckUtils]: 49: Hoare triple {18053#false} ~skip~0 := 0; {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 50: Hoare triple {18053#false} assume true; {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 51: Hoare triple {18053#false} assume !false; {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 52: Hoare triple {18053#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 53: Hoare triple {18053#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 54: Hoare triple {18053#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 55: Hoare triple {18053#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 56: Hoare triple {18053#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 57: Hoare triple {18053#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,231 INFO L273 TraceCheckUtils]: 58: Hoare triple {18053#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 59: Hoare triple {18053#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 60: Hoare triple {18053#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 61: Hoare triple {18053#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 62: Hoare triple {18053#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 63: Hoare triple {18053#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 64: Hoare triple {18053#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 65: Hoare triple {18053#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,232 INFO L273 TraceCheckUtils]: 66: Hoare triple {18053#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 67: Hoare triple {18053#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 68: Hoare triple {18053#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 69: Hoare triple {18053#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 70: Hoare triple {18053#false} assume #t~mem41 == 8544;havoc #t~mem41; {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 71: Hoare triple {18053#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 72: Hoare triple {18053#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 73: Hoare triple {18053#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 74: Hoare triple {18053#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {18053#false} is VALID [2018-11-14 19:09:07,233 INFO L273 TraceCheckUtils]: 75: Hoare triple {18053#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {18053#false} is VALID [2018-11-14 19:09:07,234 INFO L273 TraceCheckUtils]: 76: Hoare triple {18053#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {18053#false} is VALID [2018-11-14 19:09:07,234 INFO L273 TraceCheckUtils]: 77: Hoare triple {18053#false} assume ~blastFlag~0 == 8; {18053#false} is VALID [2018-11-14 19:09:07,234 INFO L273 TraceCheckUtils]: 78: Hoare triple {18053#false} assume !false; {18053#false} is VALID [2018-11-14 19:09:07,237 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:09:07,237 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:07,237 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:09:07,238 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-14 19:09:07,238 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:07,238 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:09:07,318 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:07,318 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:09:07,318 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:09:07,318 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:09:07,319 INFO L87 Difference]: Start difference. First operand 203 states and 297 transitions. Second operand 4 states. [2018-11-14 19:09:08,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:08,620 INFO L93 Difference]: Finished difference Result 397 states and 587 transitions. [2018-11-14 19:09:08,620 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:09:08,620 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-14 19:09:08,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:08,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:08,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-14 19:09:08,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:08,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-14 19:09:08,625 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 466 transitions. [2018-11-14 19:09:09,053 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:09,057 INFO L225 Difference]: With dead ends: 397 [2018-11-14 19:09:09,057 INFO L226 Difference]: Without dead ends: 220 [2018-11-14 19:09:09,058 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:09:09,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2018-11-14 19:09:09,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 203. [2018-11-14 19:09:09,099 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:09,099 INFO L82 GeneralOperation]: Start isEquivalent. First operand 220 states. Second operand 203 states. [2018-11-14 19:09:09,099 INFO L74 IsIncluded]: Start isIncluded. First operand 220 states. Second operand 203 states. [2018-11-14 19:09:09,099 INFO L87 Difference]: Start difference. First operand 220 states. Second operand 203 states. [2018-11-14 19:09:09,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:09,102 INFO L93 Difference]: Finished difference Result 220 states and 318 transitions. [2018-11-14 19:09:09,102 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states and 318 transitions. [2018-11-14 19:09:09,103 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:09,103 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:09,103 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 220 states. [2018-11-14 19:09:09,103 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 220 states. [2018-11-14 19:09:09,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:09,107 INFO L93 Difference]: Finished difference Result 220 states and 318 transitions. [2018-11-14 19:09:09,107 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states and 318 transitions. [2018-11-14 19:09:09,108 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:09,108 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:09,108 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:09,108 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:09,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-11-14 19:09:09,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 296 transitions. [2018-11-14 19:09:09,112 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 296 transitions. Word has length 79 [2018-11-14 19:09:09,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:09,112 INFO L480 AbstractCegarLoop]: Abstraction has 203 states and 296 transitions. [2018-11-14 19:09:09,112 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:09:09,112 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 296 transitions. [2018-11-14 19:09:09,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 19:09:09,113 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:09,113 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:09,114 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:09,114 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:09,114 INFO L82 PathProgramCache]: Analyzing trace with hash 714956579, now seen corresponding path program 1 times [2018-11-14 19:09:09,114 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:09,114 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:09,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:09,115 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:09,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:09,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:09,358 INFO L256 TraceCheckUtils]: 0: Hoare triple {19202#true} call ULTIMATE.init(); {19202#true} is VALID [2018-11-14 19:09:09,358 INFO L273 TraceCheckUtils]: 1: Hoare triple {19202#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {19202#true} is VALID [2018-11-14 19:09:09,359 INFO L273 TraceCheckUtils]: 2: Hoare triple {19202#true} assume true; {19202#true} is VALID [2018-11-14 19:09:09,359 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {19202#true} {19202#true} #682#return; {19202#true} is VALID [2018-11-14 19:09:09,359 INFO L256 TraceCheckUtils]: 4: Hoare triple {19202#true} call #t~ret138 := main(); {19202#true} is VALID [2018-11-14 19:09:09,359 INFO L273 TraceCheckUtils]: 5: Hoare triple {19202#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {19202#true} is VALID [2018-11-14 19:09:09,359 INFO L256 TraceCheckUtils]: 6: Hoare triple {19202#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {19202#true} is VALID [2018-11-14 19:09:09,359 INFO L273 TraceCheckUtils]: 7: Hoare triple {19202#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {19202#true} is VALID [2018-11-14 19:09:09,360 INFO L273 TraceCheckUtils]: 8: Hoare triple {19202#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {19202#true} is VALID [2018-11-14 19:09:09,360 INFO L273 TraceCheckUtils]: 9: Hoare triple {19202#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {19202#true} is VALID [2018-11-14 19:09:09,360 INFO L273 TraceCheckUtils]: 10: Hoare triple {19202#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {19202#true} is VALID [2018-11-14 19:09:09,360 INFO L273 TraceCheckUtils]: 11: Hoare triple {19202#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {19202#true} is VALID [2018-11-14 19:09:09,360 INFO L273 TraceCheckUtils]: 12: Hoare triple {19202#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {19202#true} is VALID [2018-11-14 19:09:09,360 INFO L273 TraceCheckUtils]: 13: Hoare triple {19202#true} assume true; {19202#true} is VALID [2018-11-14 19:09:09,361 INFO L273 TraceCheckUtils]: 14: Hoare triple {19202#true} assume !false; {19202#true} is VALID [2018-11-14 19:09:09,361 INFO L273 TraceCheckUtils]: 15: Hoare triple {19202#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,361 INFO L273 TraceCheckUtils]: 16: Hoare triple {19202#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,361 INFO L273 TraceCheckUtils]: 17: Hoare triple {19202#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,361 INFO L273 TraceCheckUtils]: 18: Hoare triple {19202#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,361 INFO L273 TraceCheckUtils]: 19: Hoare triple {19202#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,362 INFO L273 TraceCheckUtils]: 20: Hoare triple {19202#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,362 INFO L273 TraceCheckUtils]: 21: Hoare triple {19202#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,362 INFO L273 TraceCheckUtils]: 22: Hoare triple {19202#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,362 INFO L273 TraceCheckUtils]: 23: Hoare triple {19202#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {19202#true} is VALID [2018-11-14 19:09:09,362 INFO L273 TraceCheckUtils]: 24: Hoare triple {19202#true} assume #t~mem32 == 8464;havoc #t~mem32; {19202#true} is VALID [2018-11-14 19:09:09,362 INFO L273 TraceCheckUtils]: 25: Hoare triple {19202#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {19202#true} is VALID [2018-11-14 19:09:09,378 INFO L273 TraceCheckUtils]: 26: Hoare triple {19202#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,386 INFO L273 TraceCheckUtils]: 27: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,399 INFO L273 TraceCheckUtils]: 28: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,412 INFO L273 TraceCheckUtils]: 29: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,424 INFO L273 TraceCheckUtils]: 30: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} ~skip~0 := 0; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,441 INFO L273 TraceCheckUtils]: 31: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume true; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,449 INFO L273 TraceCheckUtils]: 32: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !false; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,462 INFO L273 TraceCheckUtils]: 33: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,474 INFO L273 TraceCheckUtils]: 34: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,487 INFO L273 TraceCheckUtils]: 35: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,505 INFO L273 TraceCheckUtils]: 36: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,513 INFO L273 TraceCheckUtils]: 37: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,526 INFO L273 TraceCheckUtils]: 38: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,539 INFO L273 TraceCheckUtils]: 39: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,551 INFO L273 TraceCheckUtils]: 40: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,569 INFO L273 TraceCheckUtils]: 41: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,578 INFO L273 TraceCheckUtils]: 42: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,590 INFO L273 TraceCheckUtils]: 43: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,603 INFO L273 TraceCheckUtils]: 44: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,615 INFO L273 TraceCheckUtils]: 45: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume #t~mem35 == 8496;havoc #t~mem35; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,628 INFO L273 TraceCheckUtils]: 46: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {19204#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-14 19:09:09,640 INFO L273 TraceCheckUtils]: 47: Hoare triple {19204#(= ssl3_accept_~blastFlag~0 1)} assume !(~blastFlag~0 == 1); {19203#false} is VALID [2018-11-14 19:09:09,641 INFO L273 TraceCheckUtils]: 48: Hoare triple {19203#false} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, ~s.offset + 92, 4); {19203#false} is VALID [2018-11-14 19:09:09,641 INFO L273 TraceCheckUtils]: 49: Hoare triple {19203#false} assume #t~mem71 != 0;havoc #t~mem71;call write~int(8656, ~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,641 INFO L273 TraceCheckUtils]: 50: Hoare triple {19203#false} call write~int(0, ~s.base, ~s.offset + 64, 4); {19203#false} is VALID [2018-11-14 19:09:09,642 INFO L273 TraceCheckUtils]: 51: Hoare triple {19203#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {19203#false} is VALID [2018-11-14 19:09:09,642 INFO L273 TraceCheckUtils]: 52: Hoare triple {19203#false} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {19203#false} is VALID [2018-11-14 19:09:09,642 INFO L273 TraceCheckUtils]: 53: Hoare triple {19203#false} ~skip~0 := 0; {19203#false} is VALID [2018-11-14 19:09:09,642 INFO L273 TraceCheckUtils]: 54: Hoare triple {19203#false} assume true; {19203#false} is VALID [2018-11-14 19:09:09,642 INFO L273 TraceCheckUtils]: 55: Hoare triple {19203#false} assume !false; {19203#false} is VALID [2018-11-14 19:09:09,642 INFO L273 TraceCheckUtils]: 56: Hoare triple {19203#false} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,643 INFO L273 TraceCheckUtils]: 57: Hoare triple {19203#false} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,643 INFO L273 TraceCheckUtils]: 58: Hoare triple {19203#false} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,643 INFO L273 TraceCheckUtils]: 59: Hoare triple {19203#false} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,643 INFO L273 TraceCheckUtils]: 60: Hoare triple {19203#false} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,643 INFO L273 TraceCheckUtils]: 61: Hoare triple {19203#false} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 62: Hoare triple {19203#false} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 63: Hoare triple {19203#false} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 64: Hoare triple {19203#false} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 65: Hoare triple {19203#false} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 66: Hoare triple {19203#false} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 67: Hoare triple {19203#false} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,644 INFO L273 TraceCheckUtils]: 68: Hoare triple {19203#false} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,645 INFO L273 TraceCheckUtils]: 69: Hoare triple {19203#false} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,645 INFO L273 TraceCheckUtils]: 70: Hoare triple {19203#false} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,645 INFO L273 TraceCheckUtils]: 71: Hoare triple {19203#false} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,645 INFO L273 TraceCheckUtils]: 72: Hoare triple {19203#false} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,645 INFO L273 TraceCheckUtils]: 73: Hoare triple {19203#false} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {19203#false} is VALID [2018-11-14 19:09:09,645 INFO L273 TraceCheckUtils]: 74: Hoare triple {19203#false} assume #t~mem41 == 8544;havoc #t~mem41; {19203#false} is VALID [2018-11-14 19:09:09,646 INFO L273 TraceCheckUtils]: 75: Hoare triple {19203#false} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {19203#false} is VALID [2018-11-14 19:09:09,646 INFO L273 TraceCheckUtils]: 76: Hoare triple {19203#false} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {19203#false} is VALID [2018-11-14 19:09:09,646 INFO L273 TraceCheckUtils]: 77: Hoare triple {19203#false} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {19203#false} is VALID [2018-11-14 19:09:09,646 INFO L273 TraceCheckUtils]: 78: Hoare triple {19203#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {19203#false} is VALID [2018-11-14 19:09:09,646 INFO L273 TraceCheckUtils]: 79: Hoare triple {19203#false} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {19203#false} is VALID [2018-11-14 19:09:09,647 INFO L273 TraceCheckUtils]: 80: Hoare triple {19203#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {19203#false} is VALID [2018-11-14 19:09:09,647 INFO L273 TraceCheckUtils]: 81: Hoare triple {19203#false} assume ~blastFlag~0 == 8; {19203#false} is VALID [2018-11-14 19:09:09,647 INFO L273 TraceCheckUtils]: 82: Hoare triple {19203#false} assume !false; {19203#false} is VALID [2018-11-14 19:09:09,652 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-14 19:09:09,652 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:09,653 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 19:09:09,653 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-14 19:09:09,653 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:09,654 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 19:09:09,855 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:09,856 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 19:09:09,856 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 19:09:09,856 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:09,857 INFO L87 Difference]: Start difference. First operand 203 states and 296 transitions. Second operand 3 states. [2018-11-14 19:09:11,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:11,180 INFO L93 Difference]: Finished difference Result 552 states and 825 transitions. [2018-11-14 19:09:11,180 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 19:09:11,180 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-14 19:09:11,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:11,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:11,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-14 19:09:11,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:11,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-14 19:09:11,187 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 603 transitions. [2018-11-14 19:09:11,710 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:11,722 INFO L225 Difference]: With dead ends: 552 [2018-11-14 19:09:11,722 INFO L226 Difference]: Without dead ends: 375 [2018-11-14 19:09:11,723 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:11,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2018-11-14 19:09:11,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 375. [2018-11-14 19:09:11,835 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:11,835 INFO L82 GeneralOperation]: Start isEquivalent. First operand 375 states. Second operand 375 states. [2018-11-14 19:09:11,835 INFO L74 IsIncluded]: Start isIncluded. First operand 375 states. Second operand 375 states. [2018-11-14 19:09:11,835 INFO L87 Difference]: Start difference. First operand 375 states. Second operand 375 states. [2018-11-14 19:09:11,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:11,845 INFO L93 Difference]: Finished difference Result 375 states and 548 transitions. [2018-11-14 19:09:11,845 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 548 transitions. [2018-11-14 19:09:11,846 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:11,846 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:11,846 INFO L74 IsIncluded]: Start isIncluded. First operand 375 states. Second operand 375 states. [2018-11-14 19:09:11,846 INFO L87 Difference]: Start difference. First operand 375 states. Second operand 375 states. [2018-11-14 19:09:11,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:11,855 INFO L93 Difference]: Finished difference Result 375 states and 548 transitions. [2018-11-14 19:09:11,855 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 548 transitions. [2018-11-14 19:09:11,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:11,856 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:11,856 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:11,856 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:11,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2018-11-14 19:09:11,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 548 transitions. [2018-11-14 19:09:11,866 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 548 transitions. Word has length 83 [2018-11-14 19:09:11,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:11,866 INFO L480 AbstractCegarLoop]: Abstraction has 375 states and 548 transitions. [2018-11-14 19:09:11,866 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 19:09:11,866 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 548 transitions. [2018-11-14 19:09:11,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-14 19:09:11,867 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:11,867 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:11,868 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:11,868 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:11,868 INFO L82 PathProgramCache]: Analyzing trace with hash 1109323365, now seen corresponding path program 1 times [2018-11-14 19:09:11,868 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:11,868 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:11,869 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:11,869 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:11,869 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:11,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:12,116 INFO L256 TraceCheckUtils]: 0: Hoare triple {21036#true} call ULTIMATE.init(); {21036#true} is VALID [2018-11-14 19:09:12,116 INFO L273 TraceCheckUtils]: 1: Hoare triple {21036#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {21036#true} is VALID [2018-11-14 19:09:12,116 INFO L273 TraceCheckUtils]: 2: Hoare triple {21036#true} assume true; {21036#true} is VALID [2018-11-14 19:09:12,117 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {21036#true} {21036#true} #682#return; {21036#true} is VALID [2018-11-14 19:09:12,117 INFO L256 TraceCheckUtils]: 4: Hoare triple {21036#true} call #t~ret138 := main(); {21036#true} is VALID [2018-11-14 19:09:12,117 INFO L273 TraceCheckUtils]: 5: Hoare triple {21036#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {21036#true} is VALID [2018-11-14 19:09:12,117 INFO L256 TraceCheckUtils]: 6: Hoare triple {21036#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {21036#true} is VALID [2018-11-14 19:09:12,118 INFO L273 TraceCheckUtils]: 7: Hoare triple {21036#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {21036#true} is VALID [2018-11-14 19:09:12,118 INFO L273 TraceCheckUtils]: 8: Hoare triple {21036#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {21036#true} is VALID [2018-11-14 19:09:12,118 INFO L273 TraceCheckUtils]: 9: Hoare triple {21036#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {21036#true} is VALID [2018-11-14 19:09:12,118 INFO L273 TraceCheckUtils]: 10: Hoare triple {21036#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {21036#true} is VALID [2018-11-14 19:09:12,118 INFO L273 TraceCheckUtils]: 11: Hoare triple {21036#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {21036#true} is VALID [2018-11-14 19:09:12,118 INFO L273 TraceCheckUtils]: 12: Hoare triple {21036#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {21036#true} is VALID [2018-11-14 19:09:12,119 INFO L273 TraceCheckUtils]: 13: Hoare triple {21036#true} assume true; {21036#true} is VALID [2018-11-14 19:09:12,119 INFO L273 TraceCheckUtils]: 14: Hoare triple {21036#true} assume !false; {21036#true} is VALID [2018-11-14 19:09:12,119 INFO L273 TraceCheckUtils]: 15: Hoare triple {21036#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,119 INFO L273 TraceCheckUtils]: 16: Hoare triple {21036#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,119 INFO L273 TraceCheckUtils]: 17: Hoare triple {21036#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,120 INFO L273 TraceCheckUtils]: 18: Hoare triple {21036#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,120 INFO L273 TraceCheckUtils]: 19: Hoare triple {21036#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,120 INFO L273 TraceCheckUtils]: 20: Hoare triple {21036#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,120 INFO L273 TraceCheckUtils]: 21: Hoare triple {21036#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,120 INFO L273 TraceCheckUtils]: 22: Hoare triple {21036#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,120 INFO L273 TraceCheckUtils]: 23: Hoare triple {21036#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,121 INFO L273 TraceCheckUtils]: 24: Hoare triple {21036#true} assume #t~mem32 == 8464;havoc #t~mem32; {21036#true} is VALID [2018-11-14 19:09:12,121 INFO L273 TraceCheckUtils]: 25: Hoare triple {21036#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {21036#true} is VALID [2018-11-14 19:09:12,121 INFO L273 TraceCheckUtils]: 26: Hoare triple {21036#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {21036#true} is VALID [2018-11-14 19:09:12,121 INFO L273 TraceCheckUtils]: 27: Hoare triple {21036#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {21036#true} is VALID [2018-11-14 19:09:12,121 INFO L273 TraceCheckUtils]: 28: Hoare triple {21036#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {21036#true} is VALID [2018-11-14 19:09:12,122 INFO L273 TraceCheckUtils]: 29: Hoare triple {21036#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {21036#true} is VALID [2018-11-14 19:09:12,122 INFO L273 TraceCheckUtils]: 30: Hoare triple {21036#true} ~skip~0 := 0; {21036#true} is VALID [2018-11-14 19:09:12,122 INFO L273 TraceCheckUtils]: 31: Hoare triple {21036#true} assume true; {21036#true} is VALID [2018-11-14 19:09:12,122 INFO L273 TraceCheckUtils]: 32: Hoare triple {21036#true} assume !false; {21036#true} is VALID [2018-11-14 19:09:12,122 INFO L273 TraceCheckUtils]: 33: Hoare triple {21036#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,122 INFO L273 TraceCheckUtils]: 34: Hoare triple {21036#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,123 INFO L273 TraceCheckUtils]: 35: Hoare triple {21036#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,123 INFO L273 TraceCheckUtils]: 36: Hoare triple {21036#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,123 INFO L273 TraceCheckUtils]: 37: Hoare triple {21036#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,123 INFO L273 TraceCheckUtils]: 38: Hoare triple {21036#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,123 INFO L273 TraceCheckUtils]: 39: Hoare triple {21036#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,124 INFO L273 TraceCheckUtils]: 40: Hoare triple {21036#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,124 INFO L273 TraceCheckUtils]: 41: Hoare triple {21036#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,124 INFO L273 TraceCheckUtils]: 42: Hoare triple {21036#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,124 INFO L273 TraceCheckUtils]: 43: Hoare triple {21036#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,124 INFO L273 TraceCheckUtils]: 44: Hoare triple {21036#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {21036#true} is VALID [2018-11-14 19:09:12,124 INFO L273 TraceCheckUtils]: 45: Hoare triple {21036#true} assume #t~mem35 == 8496;havoc #t~mem35; {21036#true} is VALID [2018-11-14 19:09:12,125 INFO L273 TraceCheckUtils]: 46: Hoare triple {21036#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {21036#true} is VALID [2018-11-14 19:09:12,137 INFO L273 TraceCheckUtils]: 47: Hoare triple {21036#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,150 INFO L273 TraceCheckUtils]: 48: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, ~s.offset + 92, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,165 INFO L273 TraceCheckUtils]: 49: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume #t~mem71 != 0;havoc #t~mem71;call write~int(8656, ~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,173 INFO L273 TraceCheckUtils]: 50: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} call write~int(0, ~s.base, ~s.offset + 64, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,186 INFO L273 TraceCheckUtils]: 51: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,198 INFO L273 TraceCheckUtils]: 52: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,211 INFO L273 TraceCheckUtils]: 53: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,223 INFO L273 TraceCheckUtils]: 54: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume true; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,236 INFO L273 TraceCheckUtils]: 55: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,250 INFO L273 TraceCheckUtils]: 56: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,258 INFO L273 TraceCheckUtils]: 57: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,271 INFO L273 TraceCheckUtils]: 58: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,283 INFO L273 TraceCheckUtils]: 59: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,298 INFO L273 TraceCheckUtils]: 60: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,307 INFO L273 TraceCheckUtils]: 61: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,322 INFO L273 TraceCheckUtils]: 62: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,331 INFO L273 TraceCheckUtils]: 63: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,343 INFO L273 TraceCheckUtils]: 64: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,356 INFO L273 TraceCheckUtils]: 65: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,370 INFO L273 TraceCheckUtils]: 66: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,381 INFO L273 TraceCheckUtils]: 67: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,394 INFO L273 TraceCheckUtils]: 68: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,406 INFO L273 TraceCheckUtils]: 69: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,419 INFO L273 TraceCheckUtils]: 70: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,432 INFO L273 TraceCheckUtils]: 71: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,441 INFO L273 TraceCheckUtils]: 72: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,453 INFO L273 TraceCheckUtils]: 73: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,466 INFO L273 TraceCheckUtils]: 74: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume #t~mem41 == 8544;havoc #t~mem41; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,480 INFO L273 TraceCheckUtils]: 75: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,489 INFO L273 TraceCheckUtils]: 76: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,501 INFO L273 TraceCheckUtils]: 77: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,514 INFO L273 TraceCheckUtils]: 78: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,526 INFO L273 TraceCheckUtils]: 79: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,539 INFO L273 TraceCheckUtils]: 80: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {21038#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-14 19:09:12,552 INFO L273 TraceCheckUtils]: 81: Hoare triple {21038#(<= ssl3_accept_~blastFlag~0 2)} assume ~blastFlag~0 == 8; {21037#false} is VALID [2018-11-14 19:09:12,552 INFO L273 TraceCheckUtils]: 82: Hoare triple {21037#false} assume !false; {21037#false} is VALID [2018-11-14 19:09:12,556 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-14 19:09:12,556 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:12,557 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 19:09:12,557 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-14 19:09:12,557 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:12,557 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 19:09:13,458 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:13,458 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 19:09:13,459 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 19:09:13,459 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:13,459 INFO L87 Difference]: Start difference. First operand 375 states and 548 transitions. Second operand 3 states. [2018-11-14 19:09:14,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:14,431 INFO L93 Difference]: Finished difference Result 899 states and 1333 transitions. [2018-11-14 19:09:14,431 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 19:09:14,431 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-14 19:09:14,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:14,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:14,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 607 transitions. [2018-11-14 19:09:14,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:14,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 607 transitions. [2018-11-14 19:09:14,435 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 607 transitions. [2018-11-14 19:09:14,963 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 607 edges. 607 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:14,986 INFO L225 Difference]: With dead ends: 899 [2018-11-14 19:09:14,986 INFO L226 Difference]: Without dead ends: 550 [2018-11-14 19:09:14,987 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:14,988 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 550 states. [2018-11-14 19:09:15,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 550 to 550. [2018-11-14 19:09:15,138 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:15,138 INFO L82 GeneralOperation]: Start isEquivalent. First operand 550 states. Second operand 550 states. [2018-11-14 19:09:15,138 INFO L74 IsIncluded]: Start isIncluded. First operand 550 states. Second operand 550 states. [2018-11-14 19:09:15,138 INFO L87 Difference]: Start difference. First operand 550 states. Second operand 550 states. [2018-11-14 19:09:15,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:15,153 INFO L93 Difference]: Finished difference Result 550 states and 808 transitions. [2018-11-14 19:09:15,153 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 808 transitions. [2018-11-14 19:09:15,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:15,153 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:15,153 INFO L74 IsIncluded]: Start isIncluded. First operand 550 states. Second operand 550 states. [2018-11-14 19:09:15,153 INFO L87 Difference]: Start difference. First operand 550 states. Second operand 550 states. [2018-11-14 19:09:15,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:15,165 INFO L93 Difference]: Finished difference Result 550 states and 808 transitions. [2018-11-14 19:09:15,165 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 808 transitions. [2018-11-14 19:09:15,165 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:15,165 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:15,165 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:15,165 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:15,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 550 states. [2018-11-14 19:09:15,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 550 states to 550 states and 808 transitions. [2018-11-14 19:09:15,178 INFO L78 Accepts]: Start accepts. Automaton has 550 states and 808 transitions. Word has length 83 [2018-11-14 19:09:15,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:15,178 INFO L480 AbstractCegarLoop]: Abstraction has 550 states and 808 transitions. [2018-11-14 19:09:15,178 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 19:09:15,178 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 808 transitions. [2018-11-14 19:09:15,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-14 19:09:15,179 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:15,179 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:15,179 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:15,180 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:15,180 INFO L82 PathProgramCache]: Analyzing trace with hash 1662043290, now seen corresponding path program 1 times [2018-11-14 19:09:15,180 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:15,180 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:15,181 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:15,181 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:15,181 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:15,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:15,451 INFO L256 TraceCheckUtils]: 0: Hoare triple {23823#true} call ULTIMATE.init(); {23823#true} is VALID [2018-11-14 19:09:15,451 INFO L273 TraceCheckUtils]: 1: Hoare triple {23823#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {23823#true} is VALID [2018-11-14 19:09:15,451 INFO L273 TraceCheckUtils]: 2: Hoare triple {23823#true} assume true; {23823#true} is VALID [2018-11-14 19:09:15,452 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23823#true} {23823#true} #682#return; {23823#true} is VALID [2018-11-14 19:09:15,452 INFO L256 TraceCheckUtils]: 4: Hoare triple {23823#true} call #t~ret138 := main(); {23823#true} is VALID [2018-11-14 19:09:15,452 INFO L273 TraceCheckUtils]: 5: Hoare triple {23823#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {23823#true} is VALID [2018-11-14 19:09:15,452 INFO L256 TraceCheckUtils]: 6: Hoare triple {23823#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {23823#true} is VALID [2018-11-14 19:09:15,452 INFO L273 TraceCheckUtils]: 7: Hoare triple {23823#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {23823#true} is VALID [2018-11-14 19:09:15,452 INFO L273 TraceCheckUtils]: 8: Hoare triple {23823#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {23823#true} is VALID [2018-11-14 19:09:15,453 INFO L273 TraceCheckUtils]: 9: Hoare triple {23823#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {23823#true} is VALID [2018-11-14 19:09:15,453 INFO L273 TraceCheckUtils]: 10: Hoare triple {23823#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {23823#true} is VALID [2018-11-14 19:09:15,453 INFO L273 TraceCheckUtils]: 11: Hoare triple {23823#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {23823#true} is VALID [2018-11-14 19:09:15,453 INFO L273 TraceCheckUtils]: 12: Hoare triple {23823#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {23823#true} is VALID [2018-11-14 19:09:15,453 INFO L273 TraceCheckUtils]: 13: Hoare triple {23823#true} assume true; {23823#true} is VALID [2018-11-14 19:09:15,454 INFO L273 TraceCheckUtils]: 14: Hoare triple {23823#true} assume !false; {23823#true} is VALID [2018-11-14 19:09:15,454 INFO L273 TraceCheckUtils]: 15: Hoare triple {23823#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,454 INFO L273 TraceCheckUtils]: 16: Hoare triple {23823#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,454 INFO L273 TraceCheckUtils]: 17: Hoare triple {23823#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,454 INFO L273 TraceCheckUtils]: 18: Hoare triple {23823#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,454 INFO L273 TraceCheckUtils]: 19: Hoare triple {23823#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,455 INFO L273 TraceCheckUtils]: 20: Hoare triple {23823#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,455 INFO L273 TraceCheckUtils]: 21: Hoare triple {23823#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,455 INFO L273 TraceCheckUtils]: 22: Hoare triple {23823#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,455 INFO L273 TraceCheckUtils]: 23: Hoare triple {23823#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,455 INFO L273 TraceCheckUtils]: 24: Hoare triple {23823#true} assume #t~mem32 == 8464;havoc #t~mem32; {23823#true} is VALID [2018-11-14 19:09:15,455 INFO L273 TraceCheckUtils]: 25: Hoare triple {23823#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {23823#true} is VALID [2018-11-14 19:09:15,456 INFO L273 TraceCheckUtils]: 26: Hoare triple {23823#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {23823#true} is VALID [2018-11-14 19:09:15,456 INFO L273 TraceCheckUtils]: 27: Hoare triple {23823#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {23823#true} is VALID [2018-11-14 19:09:15,456 INFO L273 TraceCheckUtils]: 28: Hoare triple {23823#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {23823#true} is VALID [2018-11-14 19:09:15,456 INFO L273 TraceCheckUtils]: 29: Hoare triple {23823#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23823#true} is VALID [2018-11-14 19:09:15,456 INFO L273 TraceCheckUtils]: 30: Hoare triple {23823#true} ~skip~0 := 0; {23823#true} is VALID [2018-11-14 19:09:15,456 INFO L273 TraceCheckUtils]: 31: Hoare triple {23823#true} assume true; {23823#true} is VALID [2018-11-14 19:09:15,457 INFO L273 TraceCheckUtils]: 32: Hoare triple {23823#true} assume !false; {23823#true} is VALID [2018-11-14 19:09:15,457 INFO L273 TraceCheckUtils]: 33: Hoare triple {23823#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,457 INFO L273 TraceCheckUtils]: 34: Hoare triple {23823#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,457 INFO L273 TraceCheckUtils]: 35: Hoare triple {23823#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,457 INFO L273 TraceCheckUtils]: 36: Hoare triple {23823#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,457 INFO L273 TraceCheckUtils]: 37: Hoare triple {23823#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,458 INFO L273 TraceCheckUtils]: 38: Hoare triple {23823#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,458 INFO L273 TraceCheckUtils]: 39: Hoare triple {23823#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,458 INFO L273 TraceCheckUtils]: 40: Hoare triple {23823#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,458 INFO L273 TraceCheckUtils]: 41: Hoare triple {23823#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,458 INFO L273 TraceCheckUtils]: 42: Hoare triple {23823#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,459 INFO L273 TraceCheckUtils]: 43: Hoare triple {23823#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,459 INFO L273 TraceCheckUtils]: 44: Hoare triple {23823#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,459 INFO L273 TraceCheckUtils]: 45: Hoare triple {23823#true} assume #t~mem35 == 8496;havoc #t~mem35; {23823#true} is VALID [2018-11-14 19:09:15,459 INFO L273 TraceCheckUtils]: 46: Hoare triple {23823#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {23823#true} is VALID [2018-11-14 19:09:15,459 INFO L273 TraceCheckUtils]: 47: Hoare triple {23823#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {23823#true} is VALID [2018-11-14 19:09:15,459 INFO L273 TraceCheckUtils]: 48: Hoare triple {23823#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, ~s.offset + 92, 4); {23823#true} is VALID [2018-11-14 19:09:15,460 INFO L273 TraceCheckUtils]: 49: Hoare triple {23823#true} assume #t~mem71 != 0;havoc #t~mem71;call write~int(8656, ~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,460 INFO L273 TraceCheckUtils]: 50: Hoare triple {23823#true} call write~int(0, ~s.base, ~s.offset + 64, 4); {23823#true} is VALID [2018-11-14 19:09:15,460 INFO L273 TraceCheckUtils]: 51: Hoare triple {23823#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {23823#true} is VALID [2018-11-14 19:09:15,460 INFO L273 TraceCheckUtils]: 52: Hoare triple {23823#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23823#true} is VALID [2018-11-14 19:09:15,460 INFO L273 TraceCheckUtils]: 53: Hoare triple {23823#true} ~skip~0 := 0; {23823#true} is VALID [2018-11-14 19:09:15,460 INFO L273 TraceCheckUtils]: 54: Hoare triple {23823#true} assume true; {23823#true} is VALID [2018-11-14 19:09:15,461 INFO L273 TraceCheckUtils]: 55: Hoare triple {23823#true} assume !false; {23823#true} is VALID [2018-11-14 19:09:15,461 INFO L273 TraceCheckUtils]: 56: Hoare triple {23823#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,461 INFO L273 TraceCheckUtils]: 57: Hoare triple {23823#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,461 INFO L273 TraceCheckUtils]: 58: Hoare triple {23823#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,461 INFO L273 TraceCheckUtils]: 59: Hoare triple {23823#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,461 INFO L273 TraceCheckUtils]: 60: Hoare triple {23823#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,462 INFO L273 TraceCheckUtils]: 61: Hoare triple {23823#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,462 INFO L273 TraceCheckUtils]: 62: Hoare triple {23823#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,462 INFO L273 TraceCheckUtils]: 63: Hoare triple {23823#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,462 INFO L273 TraceCheckUtils]: 64: Hoare triple {23823#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,462 INFO L273 TraceCheckUtils]: 65: Hoare triple {23823#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,463 INFO L273 TraceCheckUtils]: 66: Hoare triple {23823#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,463 INFO L273 TraceCheckUtils]: 67: Hoare triple {23823#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,463 INFO L273 TraceCheckUtils]: 68: Hoare triple {23823#true} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,463 INFO L273 TraceCheckUtils]: 69: Hoare triple {23823#true} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {23823#true} is VALID [2018-11-14 19:09:15,463 INFO L273 TraceCheckUtils]: 70: Hoare triple {23823#true} assume #t~mem37 == 8512;havoc #t~mem37; {23823#true} is VALID [2018-11-14 19:09:15,463 INFO L273 TraceCheckUtils]: 71: Hoare triple {23823#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, #t~mem72.offset + 604 + 232, 4);call #t~mem74 := read~int(#t~mem73.base, #t~mem73.offset + 12, 4); {23823#true} is VALID [2018-11-14 19:09:15,464 INFO L273 TraceCheckUtils]: 72: Hoare triple {23823#true} assume !(~bitwiseAnd(#t~mem74, 256) % 4294967296 != 0);havoc #t~mem73.base, #t~mem73.offset;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {23823#true} is VALID [2018-11-14 19:09:15,476 INFO L273 TraceCheckUtils]: 73: Hoare triple {23823#true} assume ~blastFlag~0 == 2;~blastFlag~0 := 6; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,489 INFO L273 TraceCheckUtils]: 74: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(~ret~0 <= 0); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,502 INFO L273 TraceCheckUtils]: 75: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} call write~int(8528, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,519 INFO L273 TraceCheckUtils]: 76: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,528 INFO L273 TraceCheckUtils]: 77: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,540 INFO L273 TraceCheckUtils]: 78: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} ~skip~0 := 0; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,553 INFO L273 TraceCheckUtils]: 79: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume true; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,565 INFO L273 TraceCheckUtils]: 80: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !false; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,585 INFO L273 TraceCheckUtils]: 81: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,593 INFO L273 TraceCheckUtils]: 82: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,606 INFO L273 TraceCheckUtils]: 83: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,619 INFO L273 TraceCheckUtils]: 84: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,631 INFO L273 TraceCheckUtils]: 85: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,645 INFO L273 TraceCheckUtils]: 86: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,653 INFO L273 TraceCheckUtils]: 87: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,666 INFO L273 TraceCheckUtils]: 88: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,678 INFO L273 TraceCheckUtils]: 89: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,691 INFO L273 TraceCheckUtils]: 90: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,706 INFO L273 TraceCheckUtils]: 91: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,714 INFO L273 TraceCheckUtils]: 92: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,727 INFO L273 TraceCheckUtils]: 93: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,739 INFO L273 TraceCheckUtils]: 94: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,753 INFO L273 TraceCheckUtils]: 95: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,765 INFO L273 TraceCheckUtils]: 96: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,779 INFO L273 TraceCheckUtils]: 97: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,788 INFO L273 TraceCheckUtils]: 98: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,802 INFO L273 TraceCheckUtils]: 99: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume #t~mem41 == 8544;havoc #t~mem41; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,810 INFO L273 TraceCheckUtils]: 100: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem93 := read~int(~s.base, ~s.offset + 180, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,823 INFO L273 TraceCheckUtils]: 101: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume ~bitwiseAnd(#t~mem93, 1) != 0;havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, #t~mem94.offset + 148, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,835 INFO L273 TraceCheckUtils]: 102: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !((#t~mem95.base + #t~mem95.offset) % 4294967296 != 0);havoc #t~mem95.base, #t~mem95.offset;havoc #t~mem94.base, #t~mem94.offset; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,848 INFO L273 TraceCheckUtils]: 103: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, #t~mem98.offset + 604 + 232, 4);call #t~mem100 := read~int(#t~mem99.base, #t~mem99.offset + 12, 4); {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,860 INFO L273 TraceCheckUtils]: 104: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume !(~bitwiseAnd(#t~mem100, 256) % 4294967296 != 0);havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100;havoc #t~mem99.base, #t~mem99.offset; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,873 INFO L273 TraceCheckUtils]: 105: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call write~int(1, #t~mem103.base, #t~mem103.offset + 604 + 291, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {23825#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-14 19:09:15,886 INFO L273 TraceCheckUtils]: 106: Hoare triple {23825#(<= ssl3_accept_~blastFlag~0 6)} assume ~blastFlag~0 == 8; {23824#false} is VALID [2018-11-14 19:09:15,886 INFO L273 TraceCheckUtils]: 107: Hoare triple {23824#false} assume !false; {23824#false} is VALID [2018-11-14 19:09:15,895 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2018-11-14 19:09:15,895 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:15,895 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 19:09:15,896 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 108 [2018-11-14 19:09:15,896 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:15,896 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 19:09:16,663 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:16,664 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 19:09:16,664 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 19:09:16,664 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:16,664 INFO L87 Difference]: Start difference. First operand 550 states and 808 transitions. Second operand 3 states. [2018-11-14 19:09:17,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:17,418 INFO L93 Difference]: Finished difference Result 1251 states and 1854 transitions. [2018-11-14 19:09:17,418 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 19:09:17,418 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 108 [2018-11-14 19:09:17,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:17,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:17,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 608 transitions. [2018-11-14 19:09:17,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:17,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 608 transitions. [2018-11-14 19:09:17,424 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 608 transitions. [2018-11-14 19:09:18,036 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 608 edges. 608 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:18,062 INFO L225 Difference]: With dead ends: 1251 [2018-11-14 19:09:18,062 INFO L226 Difference]: Without dead ends: 727 [2018-11-14 19:09:18,063 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:18,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2018-11-14 19:09:18,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 725. [2018-11-14 19:09:18,314 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:18,314 INFO L82 GeneralOperation]: Start isEquivalent. First operand 727 states. Second operand 725 states. [2018-11-14 19:09:18,314 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 725 states. [2018-11-14 19:09:18,315 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 725 states. [2018-11-14 19:09:18,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:18,333 INFO L93 Difference]: Finished difference Result 727 states and 1073 transitions. [2018-11-14 19:09:18,333 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1073 transitions. [2018-11-14 19:09:18,334 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:18,334 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:18,334 INFO L74 IsIncluded]: Start isIncluded. First operand 725 states. Second operand 727 states. [2018-11-14 19:09:18,334 INFO L87 Difference]: Start difference. First operand 725 states. Second operand 727 states. [2018-11-14 19:09:18,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:18,361 INFO L93 Difference]: Finished difference Result 727 states and 1073 transitions. [2018-11-14 19:09:18,361 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1073 transitions. [2018-11-14 19:09:18,362 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:18,363 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:18,363 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:18,363 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:18,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 725 states. [2018-11-14 19:09:18,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 725 states to 725 states and 1072 transitions. [2018-11-14 19:09:18,384 INFO L78 Accepts]: Start accepts. Automaton has 725 states and 1072 transitions. Word has length 108 [2018-11-14 19:09:18,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:18,385 INFO L480 AbstractCegarLoop]: Abstraction has 725 states and 1072 transitions. [2018-11-14 19:09:18,385 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 19:09:18,385 INFO L276 IsEmpty]: Start isEmpty. Operand 725 states and 1072 transitions. [2018-11-14 19:09:18,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2018-11-14 19:09:18,386 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:18,386 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:18,386 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:18,386 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:18,386 INFO L82 PathProgramCache]: Analyzing trace with hash -1142029832, now seen corresponding path program 1 times [2018-11-14 19:09:18,386 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:18,386 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:18,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:18,387 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:18,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:18,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:18,658 INFO L256 TraceCheckUtils]: 0: Hoare triple {27573#true} call ULTIMATE.init(); {27573#true} is VALID [2018-11-14 19:09:18,658 INFO L273 TraceCheckUtils]: 1: Hoare triple {27573#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {27573#true} is VALID [2018-11-14 19:09:18,659 INFO L273 TraceCheckUtils]: 2: Hoare triple {27573#true} assume true; {27573#true} is VALID [2018-11-14 19:09:18,659 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {27573#true} {27573#true} #682#return; {27573#true} is VALID [2018-11-14 19:09:18,659 INFO L256 TraceCheckUtils]: 4: Hoare triple {27573#true} call #t~ret138 := main(); {27573#true} is VALID [2018-11-14 19:09:18,659 INFO L273 TraceCheckUtils]: 5: Hoare triple {27573#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {27573#true} is VALID [2018-11-14 19:09:18,659 INFO L256 TraceCheckUtils]: 6: Hoare triple {27573#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {27573#true} is VALID [2018-11-14 19:09:18,659 INFO L273 TraceCheckUtils]: 7: Hoare triple {27573#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {27573#true} is VALID [2018-11-14 19:09:18,660 INFO L273 TraceCheckUtils]: 8: Hoare triple {27573#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {27573#true} is VALID [2018-11-14 19:09:18,660 INFO L273 TraceCheckUtils]: 9: Hoare triple {27573#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {27573#true} is VALID [2018-11-14 19:09:18,660 INFO L273 TraceCheckUtils]: 10: Hoare triple {27573#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {27573#true} is VALID [2018-11-14 19:09:18,660 INFO L273 TraceCheckUtils]: 11: Hoare triple {27573#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {27573#true} is VALID [2018-11-14 19:09:18,660 INFO L273 TraceCheckUtils]: 12: Hoare triple {27573#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {27573#true} is VALID [2018-11-14 19:09:18,661 INFO L273 TraceCheckUtils]: 13: Hoare triple {27573#true} assume true; {27573#true} is VALID [2018-11-14 19:09:18,661 INFO L273 TraceCheckUtils]: 14: Hoare triple {27573#true} assume !false; {27573#true} is VALID [2018-11-14 19:09:18,661 INFO L273 TraceCheckUtils]: 15: Hoare triple {27573#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,661 INFO L273 TraceCheckUtils]: 16: Hoare triple {27573#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,661 INFO L273 TraceCheckUtils]: 17: Hoare triple {27573#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,662 INFO L273 TraceCheckUtils]: 18: Hoare triple {27573#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,662 INFO L273 TraceCheckUtils]: 19: Hoare triple {27573#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,662 INFO L273 TraceCheckUtils]: 20: Hoare triple {27573#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,662 INFO L273 TraceCheckUtils]: 21: Hoare triple {27573#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,662 INFO L273 TraceCheckUtils]: 22: Hoare triple {27573#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,662 INFO L273 TraceCheckUtils]: 23: Hoare triple {27573#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,663 INFO L273 TraceCheckUtils]: 24: Hoare triple {27573#true} assume #t~mem32 == 8464;havoc #t~mem32; {27573#true} is VALID [2018-11-14 19:09:18,663 INFO L273 TraceCheckUtils]: 25: Hoare triple {27573#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {27573#true} is VALID [2018-11-14 19:09:18,663 INFO L273 TraceCheckUtils]: 26: Hoare triple {27573#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {27573#true} is VALID [2018-11-14 19:09:18,663 INFO L273 TraceCheckUtils]: 27: Hoare triple {27573#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {27573#true} is VALID [2018-11-14 19:09:18,663 INFO L273 TraceCheckUtils]: 28: Hoare triple {27573#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {27573#true} is VALID [2018-11-14 19:09:18,663 INFO L273 TraceCheckUtils]: 29: Hoare triple {27573#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {27573#true} is VALID [2018-11-14 19:09:18,664 INFO L273 TraceCheckUtils]: 30: Hoare triple {27573#true} ~skip~0 := 0; {27573#true} is VALID [2018-11-14 19:09:18,664 INFO L273 TraceCheckUtils]: 31: Hoare triple {27573#true} assume true; {27573#true} is VALID [2018-11-14 19:09:18,664 INFO L273 TraceCheckUtils]: 32: Hoare triple {27573#true} assume !false; {27573#true} is VALID [2018-11-14 19:09:18,664 INFO L273 TraceCheckUtils]: 33: Hoare triple {27573#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,664 INFO L273 TraceCheckUtils]: 34: Hoare triple {27573#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,665 INFO L273 TraceCheckUtils]: 35: Hoare triple {27573#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,665 INFO L273 TraceCheckUtils]: 36: Hoare triple {27573#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,665 INFO L273 TraceCheckUtils]: 37: Hoare triple {27573#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,665 INFO L273 TraceCheckUtils]: 38: Hoare triple {27573#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,665 INFO L273 TraceCheckUtils]: 39: Hoare triple {27573#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,665 INFO L273 TraceCheckUtils]: 40: Hoare triple {27573#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,666 INFO L273 TraceCheckUtils]: 41: Hoare triple {27573#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,666 INFO L273 TraceCheckUtils]: 42: Hoare triple {27573#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,666 INFO L273 TraceCheckUtils]: 43: Hoare triple {27573#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,666 INFO L273 TraceCheckUtils]: 44: Hoare triple {27573#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,666 INFO L273 TraceCheckUtils]: 45: Hoare triple {27573#true} assume #t~mem35 == 8496;havoc #t~mem35; {27573#true} is VALID [2018-11-14 19:09:18,667 INFO L273 TraceCheckUtils]: 46: Hoare triple {27573#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {27573#true} is VALID [2018-11-14 19:09:18,667 INFO L273 TraceCheckUtils]: 47: Hoare triple {27573#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {27573#true} is VALID [2018-11-14 19:09:18,667 INFO L273 TraceCheckUtils]: 48: Hoare triple {27573#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, ~s.offset + 92, 4); {27573#true} is VALID [2018-11-14 19:09:18,667 INFO L273 TraceCheckUtils]: 49: Hoare triple {27573#true} assume #t~mem71 != 0;havoc #t~mem71;call write~int(8656, ~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,667 INFO L273 TraceCheckUtils]: 50: Hoare triple {27573#true} call write~int(0, ~s.base, ~s.offset + 64, 4); {27573#true} is VALID [2018-11-14 19:09:18,667 INFO L273 TraceCheckUtils]: 51: Hoare triple {27573#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {27573#true} is VALID [2018-11-14 19:09:18,668 INFO L273 TraceCheckUtils]: 52: Hoare triple {27573#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {27573#true} is VALID [2018-11-14 19:09:18,668 INFO L273 TraceCheckUtils]: 53: Hoare triple {27573#true} ~skip~0 := 0; {27573#true} is VALID [2018-11-14 19:09:18,668 INFO L273 TraceCheckUtils]: 54: Hoare triple {27573#true} assume true; {27573#true} is VALID [2018-11-14 19:09:18,668 INFO L273 TraceCheckUtils]: 55: Hoare triple {27573#true} assume !false; {27573#true} is VALID [2018-11-14 19:09:18,668 INFO L273 TraceCheckUtils]: 56: Hoare triple {27573#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,669 INFO L273 TraceCheckUtils]: 57: Hoare triple {27573#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,669 INFO L273 TraceCheckUtils]: 58: Hoare triple {27573#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,669 INFO L273 TraceCheckUtils]: 59: Hoare triple {27573#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,669 INFO L273 TraceCheckUtils]: 60: Hoare triple {27573#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,669 INFO L273 TraceCheckUtils]: 61: Hoare triple {27573#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,669 INFO L273 TraceCheckUtils]: 62: Hoare triple {27573#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,670 INFO L273 TraceCheckUtils]: 63: Hoare triple {27573#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,670 INFO L273 TraceCheckUtils]: 64: Hoare triple {27573#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,670 INFO L273 TraceCheckUtils]: 65: Hoare triple {27573#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,670 INFO L273 TraceCheckUtils]: 66: Hoare triple {27573#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,670 INFO L273 TraceCheckUtils]: 67: Hoare triple {27573#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,671 INFO L273 TraceCheckUtils]: 68: Hoare triple {27573#true} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,671 INFO L273 TraceCheckUtils]: 69: Hoare triple {27573#true} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {27573#true} is VALID [2018-11-14 19:09:18,671 INFO L273 TraceCheckUtils]: 70: Hoare triple {27573#true} assume #t~mem37 == 8512;havoc #t~mem37; {27573#true} is VALID [2018-11-14 19:09:18,671 INFO L273 TraceCheckUtils]: 71: Hoare triple {27573#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, #t~mem72.offset + 604 + 232, 4);call #t~mem74 := read~int(#t~mem73.base, #t~mem73.offset + 12, 4); {27573#true} is VALID [2018-11-14 19:09:18,671 INFO L273 TraceCheckUtils]: 72: Hoare triple {27573#true} assume !(~bitwiseAnd(#t~mem74, 256) % 4294967296 != 0);havoc #t~mem73.base, #t~mem73.offset;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {27573#true} is VALID [2018-11-14 19:09:18,684 INFO L273 TraceCheckUtils]: 73: Hoare triple {27573#true} assume ~blastFlag~0 == 2;~blastFlag~0 := 6; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,697 INFO L273 TraceCheckUtils]: 74: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(~ret~0 <= 0); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,714 INFO L273 TraceCheckUtils]: 75: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} call write~int(8528, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,722 INFO L273 TraceCheckUtils]: 76: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,735 INFO L273 TraceCheckUtils]: 77: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,747 INFO L273 TraceCheckUtils]: 78: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} ~skip~0 := 0; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,762 INFO L273 TraceCheckUtils]: 79: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume true; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,770 INFO L273 TraceCheckUtils]: 80: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !false; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,784 INFO L273 TraceCheckUtils]: 81: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,792 INFO L273 TraceCheckUtils]: 82: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,804 INFO L273 TraceCheckUtils]: 83: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,818 INFO L273 TraceCheckUtils]: 84: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,826 INFO L273 TraceCheckUtils]: 85: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,839 INFO L273 TraceCheckUtils]: 86: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,851 INFO L273 TraceCheckUtils]: 87: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,864 INFO L273 TraceCheckUtils]: 88: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,879 INFO L273 TraceCheckUtils]: 89: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,887 INFO L273 TraceCheckUtils]: 90: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,906 INFO L273 TraceCheckUtils]: 91: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,915 INFO L273 TraceCheckUtils]: 92: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,930 INFO L273 TraceCheckUtils]: 93: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,939 INFO L273 TraceCheckUtils]: 94: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,951 INFO L273 TraceCheckUtils]: 95: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,969 INFO L273 TraceCheckUtils]: 96: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,977 INFO L273 TraceCheckUtils]: 97: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:18,990 INFO L273 TraceCheckUtils]: 98: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,003 INFO L273 TraceCheckUtils]: 99: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem41 == 8544);havoc #t~mem41;call #t~mem42 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,015 INFO L273 TraceCheckUtils]: 100: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem42 == 8545);havoc #t~mem42;call #t~mem43 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,031 INFO L273 TraceCheckUtils]: 101: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem43 == 8560);havoc #t~mem43;call #t~mem44 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,040 INFO L273 TraceCheckUtils]: 102: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem44 == 8561);havoc #t~mem44;call #t~mem45 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,052 INFO L273 TraceCheckUtils]: 103: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem45 == 8448);havoc #t~mem45;call #t~mem46 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,065 INFO L273 TraceCheckUtils]: 104: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem46 == 8576);havoc #t~mem46;call #t~mem47 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,079 INFO L273 TraceCheckUtils]: 105: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem47 == 8577);havoc #t~mem47;call #t~mem48 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,088 INFO L273 TraceCheckUtils]: 106: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem48 == 8592);havoc #t~mem48;call #t~mem49 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,100 INFO L273 TraceCheckUtils]: 107: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem49 == 8593);havoc #t~mem49;call #t~mem50 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,113 INFO L273 TraceCheckUtils]: 108: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem50 == 8608);havoc #t~mem50;call #t~mem51 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,126 INFO L273 TraceCheckUtils]: 109: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume !(#t~mem51 == 8609);havoc #t~mem51;call #t~mem52 := read~int(~s.base, ~s.offset + 52, 4); {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,139 INFO L273 TraceCheckUtils]: 110: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume #t~mem52 == 8640;havoc #t~mem52; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,148 INFO L273 TraceCheckUtils]: 111: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {27575#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-14 19:09:19,167 INFO L273 TraceCheckUtils]: 112: Hoare triple {27575#(<= 6 ssl3_accept_~blastFlag~0)} assume ~blastFlag~0 == 5; {27574#false} is VALID [2018-11-14 19:09:19,167 INFO L273 TraceCheckUtils]: 113: Hoare triple {27574#false} assume !false; {27574#false} is VALID [2018-11-14 19:09:19,175 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2018-11-14 19:09:19,176 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:19,176 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-14 19:09:19,176 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 114 [2018-11-14 19:09:19,177 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:19,177 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-14 19:09:19,270 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:19,270 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-14 19:09:19,271 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-14 19:09:19,271 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:19,271 INFO L87 Difference]: Start difference. First operand 725 states and 1072 transitions. Second operand 3 states. [2018-11-14 19:09:20,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:20,755 INFO L93 Difference]: Finished difference Result 1601 states and 2380 transitions. [2018-11-14 19:09:20,755 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-14 19:09:20,755 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 114 [2018-11-14 19:09:20,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:20,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:20,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 606 transitions. [2018-11-14 19:09:20,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-14 19:09:20,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 606 transitions. [2018-11-14 19:09:20,762 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 606 transitions. [2018-11-14 19:09:21,451 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 606 edges. 606 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:21,492 INFO L225 Difference]: With dead ends: 1601 [2018-11-14 19:09:21,492 INFO L226 Difference]: Without dead ends: 902 [2018-11-14 19:09:21,494 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-14 19:09:21,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 902 states. [2018-11-14 19:09:22,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 902 to 900. [2018-11-14 19:09:22,026 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:22,026 INFO L82 GeneralOperation]: Start isEquivalent. First operand 902 states. Second operand 900 states. [2018-11-14 19:09:22,026 INFO L74 IsIncluded]: Start isIncluded. First operand 902 states. Second operand 900 states. [2018-11-14 19:09:22,026 INFO L87 Difference]: Start difference. First operand 902 states. Second operand 900 states. [2018-11-14 19:09:22,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:22,061 INFO L93 Difference]: Finished difference Result 902 states and 1323 transitions. [2018-11-14 19:09:22,061 INFO L276 IsEmpty]: Start isEmpty. Operand 902 states and 1323 transitions. [2018-11-14 19:09:22,062 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:22,062 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:22,062 INFO L74 IsIncluded]: Start isIncluded. First operand 900 states. Second operand 902 states. [2018-11-14 19:09:22,062 INFO L87 Difference]: Start difference. First operand 900 states. Second operand 902 states. [2018-11-14 19:09:22,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:22,088 INFO L93 Difference]: Finished difference Result 902 states and 1323 transitions. [2018-11-14 19:09:22,088 INFO L276 IsEmpty]: Start isEmpty. Operand 902 states and 1323 transitions. [2018-11-14 19:09:22,089 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:22,089 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:22,089 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:22,090 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:22,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-14 19:09:22,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1322 transitions. [2018-11-14 19:09:22,136 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1322 transitions. Word has length 114 [2018-11-14 19:09:22,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:22,136 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1322 transitions. [2018-11-14 19:09:22,136 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-14 19:09:22,136 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1322 transitions. [2018-11-14 19:09:22,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-14 19:09:22,138 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:22,138 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:22,139 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:22,139 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:22,139 INFO L82 PathProgramCache]: Analyzing trace with hash 2044230989, now seen corresponding path program 1 times [2018-11-14 19:09:22,139 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:22,139 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:22,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:22,140 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:22,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:22,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:22,431 WARN L179 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 12 DAG size of output: 9 [2018-11-14 19:09:22,669 INFO L256 TraceCheckUtils]: 0: Hoare triple {32279#true} call ULTIMATE.init(); {32279#true} is VALID [2018-11-14 19:09:22,669 INFO L273 TraceCheckUtils]: 1: Hoare triple {32279#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {32279#true} is VALID [2018-11-14 19:09:22,670 INFO L273 TraceCheckUtils]: 2: Hoare triple {32279#true} assume true; {32279#true} is VALID [2018-11-14 19:09:22,670 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {32279#true} {32279#true} #682#return; {32279#true} is VALID [2018-11-14 19:09:22,670 INFO L256 TraceCheckUtils]: 4: Hoare triple {32279#true} call #t~ret138 := main(); {32279#true} is VALID [2018-11-14 19:09:22,670 INFO L273 TraceCheckUtils]: 5: Hoare triple {32279#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {32279#true} is VALID [2018-11-14 19:09:22,670 INFO L256 TraceCheckUtils]: 6: Hoare triple {32279#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {32279#true} is VALID [2018-11-14 19:09:22,671 INFO L273 TraceCheckUtils]: 7: Hoare triple {32279#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {32279#true} is VALID [2018-11-14 19:09:22,671 INFO L273 TraceCheckUtils]: 8: Hoare triple {32279#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {32279#true} is VALID [2018-11-14 19:09:22,671 INFO L273 TraceCheckUtils]: 9: Hoare triple {32279#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {32279#true} is VALID [2018-11-14 19:09:22,671 INFO L273 TraceCheckUtils]: 10: Hoare triple {32279#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {32279#true} is VALID [2018-11-14 19:09:22,671 INFO L273 TraceCheckUtils]: 11: Hoare triple {32279#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {32279#true} is VALID [2018-11-14 19:09:22,671 INFO L273 TraceCheckUtils]: 12: Hoare triple {32279#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {32279#true} is VALID [2018-11-14 19:09:22,672 INFO L273 TraceCheckUtils]: 13: Hoare triple {32279#true} assume true; {32279#true} is VALID [2018-11-14 19:09:22,672 INFO L273 TraceCheckUtils]: 14: Hoare triple {32279#true} assume !false; {32279#true} is VALID [2018-11-14 19:09:22,672 INFO L273 TraceCheckUtils]: 15: Hoare triple {32279#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,672 INFO L273 TraceCheckUtils]: 16: Hoare triple {32279#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,672 INFO L273 TraceCheckUtils]: 17: Hoare triple {32279#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,672 INFO L273 TraceCheckUtils]: 18: Hoare triple {32279#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,673 INFO L273 TraceCheckUtils]: 19: Hoare triple {32279#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,673 INFO L273 TraceCheckUtils]: 20: Hoare triple {32279#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,673 INFO L273 TraceCheckUtils]: 21: Hoare triple {32279#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,673 INFO L273 TraceCheckUtils]: 22: Hoare triple {32279#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,673 INFO L273 TraceCheckUtils]: 23: Hoare triple {32279#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,674 INFO L273 TraceCheckUtils]: 24: Hoare triple {32279#true} assume #t~mem32 == 8464;havoc #t~mem32; {32279#true} is VALID [2018-11-14 19:09:22,674 INFO L273 TraceCheckUtils]: 25: Hoare triple {32279#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {32279#true} is VALID [2018-11-14 19:09:22,674 INFO L273 TraceCheckUtils]: 26: Hoare triple {32279#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {32279#true} is VALID [2018-11-14 19:09:22,674 INFO L273 TraceCheckUtils]: 27: Hoare triple {32279#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {32279#true} is VALID [2018-11-14 19:09:22,674 INFO L273 TraceCheckUtils]: 28: Hoare triple {32279#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {32279#true} is VALID [2018-11-14 19:09:22,674 INFO L273 TraceCheckUtils]: 29: Hoare triple {32279#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32279#true} is VALID [2018-11-14 19:09:22,675 INFO L273 TraceCheckUtils]: 30: Hoare triple {32279#true} ~skip~0 := 0; {32279#true} is VALID [2018-11-14 19:09:22,675 INFO L273 TraceCheckUtils]: 31: Hoare triple {32279#true} assume true; {32279#true} is VALID [2018-11-14 19:09:22,675 INFO L273 TraceCheckUtils]: 32: Hoare triple {32279#true} assume !false; {32279#true} is VALID [2018-11-14 19:09:22,675 INFO L273 TraceCheckUtils]: 33: Hoare triple {32279#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,675 INFO L273 TraceCheckUtils]: 34: Hoare triple {32279#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,675 INFO L273 TraceCheckUtils]: 35: Hoare triple {32279#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,676 INFO L273 TraceCheckUtils]: 36: Hoare triple {32279#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,676 INFO L273 TraceCheckUtils]: 37: Hoare triple {32279#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,676 INFO L273 TraceCheckUtils]: 38: Hoare triple {32279#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,676 INFO L273 TraceCheckUtils]: 39: Hoare triple {32279#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,676 INFO L273 TraceCheckUtils]: 40: Hoare triple {32279#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,676 INFO L273 TraceCheckUtils]: 41: Hoare triple {32279#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,677 INFO L273 TraceCheckUtils]: 42: Hoare triple {32279#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,677 INFO L273 TraceCheckUtils]: 43: Hoare triple {32279#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,677 INFO L273 TraceCheckUtils]: 44: Hoare triple {32279#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,677 INFO L273 TraceCheckUtils]: 45: Hoare triple {32279#true} assume #t~mem35 == 8496;havoc #t~mem35; {32279#true} is VALID [2018-11-14 19:09:22,677 INFO L273 TraceCheckUtils]: 46: Hoare triple {32279#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {32279#true} is VALID [2018-11-14 19:09:22,677 INFO L273 TraceCheckUtils]: 47: Hoare triple {32279#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {32279#true} is VALID [2018-11-14 19:09:22,678 INFO L273 TraceCheckUtils]: 48: Hoare triple {32279#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, ~s.offset + 92, 4); {32279#true} is VALID [2018-11-14 19:09:22,678 INFO L273 TraceCheckUtils]: 49: Hoare triple {32279#true} assume #t~mem71 != 0;havoc #t~mem71;call write~int(8656, ~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,678 INFO L273 TraceCheckUtils]: 50: Hoare triple {32279#true} call write~int(0, ~s.base, ~s.offset + 64, 4); {32279#true} is VALID [2018-11-14 19:09:22,678 INFO L273 TraceCheckUtils]: 51: Hoare triple {32279#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {32279#true} is VALID [2018-11-14 19:09:22,678 INFO L273 TraceCheckUtils]: 52: Hoare triple {32279#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32279#true} is VALID [2018-11-14 19:09:22,678 INFO L273 TraceCheckUtils]: 53: Hoare triple {32279#true} ~skip~0 := 0; {32279#true} is VALID [2018-11-14 19:09:22,679 INFO L273 TraceCheckUtils]: 54: Hoare triple {32279#true} assume true; {32279#true} is VALID [2018-11-14 19:09:22,679 INFO L273 TraceCheckUtils]: 55: Hoare triple {32279#true} assume !false; {32279#true} is VALID [2018-11-14 19:09:22,679 INFO L273 TraceCheckUtils]: 56: Hoare triple {32279#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,679 INFO L273 TraceCheckUtils]: 57: Hoare triple {32279#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,679 INFO L273 TraceCheckUtils]: 58: Hoare triple {32279#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,680 INFO L273 TraceCheckUtils]: 59: Hoare triple {32279#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,680 INFO L273 TraceCheckUtils]: 60: Hoare triple {32279#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,680 INFO L273 TraceCheckUtils]: 61: Hoare triple {32279#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,680 INFO L273 TraceCheckUtils]: 62: Hoare triple {32279#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,680 INFO L273 TraceCheckUtils]: 63: Hoare triple {32279#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,681 INFO L273 TraceCheckUtils]: 64: Hoare triple {32279#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,681 INFO L273 TraceCheckUtils]: 65: Hoare triple {32279#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,682 INFO L273 TraceCheckUtils]: 66: Hoare triple {32279#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,682 INFO L273 TraceCheckUtils]: 67: Hoare triple {32279#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,682 INFO L273 TraceCheckUtils]: 68: Hoare triple {32279#true} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,682 INFO L273 TraceCheckUtils]: 69: Hoare triple {32279#true} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,682 INFO L273 TraceCheckUtils]: 70: Hoare triple {32279#true} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,683 INFO L273 TraceCheckUtils]: 71: Hoare triple {32279#true} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,683 INFO L273 TraceCheckUtils]: 72: Hoare triple {32279#true} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,683 INFO L273 TraceCheckUtils]: 73: Hoare triple {32279#true} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,683 INFO L273 TraceCheckUtils]: 74: Hoare triple {32279#true} assume !(#t~mem41 == 8544);havoc #t~mem41;call #t~mem42 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,683 INFO L273 TraceCheckUtils]: 75: Hoare triple {32279#true} assume !(#t~mem42 == 8545);havoc #t~mem42;call #t~mem43 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,683 INFO L273 TraceCheckUtils]: 76: Hoare triple {32279#true} assume !(#t~mem43 == 8560);havoc #t~mem43;call #t~mem44 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,684 INFO L273 TraceCheckUtils]: 77: Hoare triple {32279#true} assume !(#t~mem44 == 8561);havoc #t~mem44;call #t~mem45 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,684 INFO L273 TraceCheckUtils]: 78: Hoare triple {32279#true} assume !(#t~mem45 == 8448);havoc #t~mem45;call #t~mem46 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,684 INFO L273 TraceCheckUtils]: 79: Hoare triple {32279#true} assume !(#t~mem46 == 8576);havoc #t~mem46;call #t~mem47 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,684 INFO L273 TraceCheckUtils]: 80: Hoare triple {32279#true} assume !(#t~mem47 == 8577);havoc #t~mem47;call #t~mem48 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,684 INFO L273 TraceCheckUtils]: 81: Hoare triple {32279#true} assume !(#t~mem48 == 8592);havoc #t~mem48;call #t~mem49 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,684 INFO L273 TraceCheckUtils]: 82: Hoare triple {32279#true} assume !(#t~mem49 == 8593);havoc #t~mem49;call #t~mem50 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,685 INFO L273 TraceCheckUtils]: 83: Hoare triple {32279#true} assume !(#t~mem50 == 8608);havoc #t~mem50;call #t~mem51 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,685 INFO L273 TraceCheckUtils]: 84: Hoare triple {32279#true} assume !(#t~mem51 == 8609);havoc #t~mem51;call #t~mem52 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,685 INFO L273 TraceCheckUtils]: 85: Hoare triple {32279#true} assume !(#t~mem52 == 8640);havoc #t~mem52;call #t~mem53 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,685 INFO L273 TraceCheckUtils]: 86: Hoare triple {32279#true} assume !(#t~mem53 == 8641);havoc #t~mem53;call #t~mem54 := read~int(~s.base, ~s.offset + 52, 4); {32279#true} is VALID [2018-11-14 19:09:22,685 INFO L273 TraceCheckUtils]: 87: Hoare triple {32279#true} assume #t~mem54 == 8656;havoc #t~mem54; {32279#true} is VALID [2018-11-14 19:09:22,686 INFO L273 TraceCheckUtils]: 88: Hoare triple {32279#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, #t~mem118.offset + 604 + 232, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, #t~mem117.offset + 172, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {32279#true} is VALID [2018-11-14 19:09:22,686 INFO L273 TraceCheckUtils]: 89: Hoare triple {32279#true} assume !(~tmp___9~0 == 0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {32279#true} is VALID [2018-11-14 19:09:22,686 INFO L273 TraceCheckUtils]: 90: Hoare triple {32279#true} assume ~blastFlag~0 == 2;~blastFlag~0 := 3; {32279#true} is VALID [2018-11-14 19:09:22,705 INFO L273 TraceCheckUtils]: 91: Hoare triple {32279#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,719 INFO L273 TraceCheckUtils]: 92: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(~tmp___10~0 == 0); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,728 INFO L273 TraceCheckUtils]: 93: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,742 INFO L273 TraceCheckUtils]: 94: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,751 INFO L273 TraceCheckUtils]: 95: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,768 INFO L273 TraceCheckUtils]: 96: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume true; {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,777 INFO L273 TraceCheckUtils]: 97: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,789 INFO L273 TraceCheckUtils]: 98: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,802 INFO L273 TraceCheckUtils]: 99: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,815 INFO L273 TraceCheckUtils]: 100: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,829 INFO L273 TraceCheckUtils]: 101: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,838 INFO L273 TraceCheckUtils]: 102: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,850 INFO L273 TraceCheckUtils]: 103: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,860 INFO L273 TraceCheckUtils]: 104: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,860 INFO L273 TraceCheckUtils]: 105: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,861 INFO L273 TraceCheckUtils]: 106: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,861 INFO L273 TraceCheckUtils]: 107: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,864 INFO L273 TraceCheckUtils]: 108: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,864 INFO L273 TraceCheckUtils]: 109: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,866 INFO L273 TraceCheckUtils]: 110: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,866 INFO L273 TraceCheckUtils]: 111: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,869 INFO L273 TraceCheckUtils]: 112: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,869 INFO L273 TraceCheckUtils]: 113: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,869 INFO L273 TraceCheckUtils]: 114: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,870 INFO L273 TraceCheckUtils]: 115: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,870 INFO L273 TraceCheckUtils]: 116: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem41 == 8544);havoc #t~mem41;call #t~mem42 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,870 INFO L273 TraceCheckUtils]: 117: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem42 == 8545);havoc #t~mem42;call #t~mem43 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,871 INFO L273 TraceCheckUtils]: 118: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem43 == 8560);havoc #t~mem43;call #t~mem44 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,871 INFO L273 TraceCheckUtils]: 119: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem44 == 8561);havoc #t~mem44;call #t~mem45 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,871 INFO L273 TraceCheckUtils]: 120: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem45 == 8448);havoc #t~mem45;call #t~mem46 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,872 INFO L273 TraceCheckUtils]: 121: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem46 == 8576);havoc #t~mem46;call #t~mem47 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,872 INFO L273 TraceCheckUtils]: 122: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem47 == 8577);havoc #t~mem47;call #t~mem48 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,872 INFO L273 TraceCheckUtils]: 123: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem48 == 8592);havoc #t~mem48;call #t~mem49 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,873 INFO L273 TraceCheckUtils]: 124: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem49 == 8593);havoc #t~mem49;call #t~mem50 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,873 INFO L273 TraceCheckUtils]: 125: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem50 == 8608);havoc #t~mem50;call #t~mem51 := read~int(~s.base, ~s.offset + 52, 4); {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:22,874 INFO L273 TraceCheckUtils]: 126: Hoare triple {32281#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem51 == 8609);havoc #t~mem51;call #t~mem52 := read~int(~s.base, ~s.offset + 52, 4); {32282#(= 8672 |ssl3_accept_#t~mem52|)} is VALID [2018-11-14 19:09:22,874 INFO L273 TraceCheckUtils]: 127: Hoare triple {32282#(= 8672 |ssl3_accept_#t~mem52|)} assume #t~mem52 == 8640;havoc #t~mem52; {32280#false} is VALID [2018-11-14 19:09:22,875 INFO L273 TraceCheckUtils]: 128: Hoare triple {32280#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {32280#false} is VALID [2018-11-14 19:09:22,875 INFO L273 TraceCheckUtils]: 129: Hoare triple {32280#false} assume ~blastFlag~0 == 5; {32280#false} is VALID [2018-11-14 19:09:22,875 INFO L273 TraceCheckUtils]: 130: Hoare triple {32280#false} assume !false; {32280#false} is VALID [2018-11-14 19:09:22,896 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 65 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2018-11-14 19:09:22,896 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:22,897 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:09:22,897 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 131 [2018-11-14 19:09:22,897 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:22,897 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:09:23,015 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 103 edges. 103 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:23,016 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:09:23,016 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:09:23,016 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:09:23,016 INFO L87 Difference]: Start difference. First operand 900 states and 1322 transitions. Second operand 4 states. [2018-11-14 19:09:26,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:26,016 INFO L93 Difference]: Finished difference Result 2354 states and 3475 transitions. [2018-11-14 19:09:26,016 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-14 19:09:26,016 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 131 [2018-11-14 19:09:26,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-14 19:09:26,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:26,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 579 transitions. [2018-11-14 19:09:26,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-14 19:09:26,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 579 transitions. [2018-11-14 19:09:26,021 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 579 transitions. [2018-11-14 19:09:26,665 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 579 edges. 579 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:26,760 INFO L225 Difference]: With dead ends: 2354 [2018-11-14 19:09:26,760 INFO L226 Difference]: Without dead ends: 1480 [2018-11-14 19:09:26,762 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-14 19:09:26,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1480 states. [2018-11-14 19:09:27,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1480 to 1100. [2018-11-14 19:09:27,381 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-14 19:09:27,382 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1480 states. Second operand 1100 states. [2018-11-14 19:09:27,382 INFO L74 IsIncluded]: Start isIncluded. First operand 1480 states. Second operand 1100 states. [2018-11-14 19:09:27,382 INFO L87 Difference]: Start difference. First operand 1480 states. Second operand 1100 states. [2018-11-14 19:09:27,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:27,450 INFO L93 Difference]: Finished difference Result 1480 states and 2177 transitions. [2018-11-14 19:09:27,450 INFO L276 IsEmpty]: Start isEmpty. Operand 1480 states and 2177 transitions. [2018-11-14 19:09:27,452 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:27,452 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:27,452 INFO L74 IsIncluded]: Start isIncluded. First operand 1100 states. Second operand 1480 states. [2018-11-14 19:09:27,452 INFO L87 Difference]: Start difference. First operand 1100 states. Second operand 1480 states. [2018-11-14 19:09:27,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-14 19:09:27,535 INFO L93 Difference]: Finished difference Result 1480 states and 2177 transitions. [2018-11-14 19:09:27,535 INFO L276 IsEmpty]: Start isEmpty. Operand 1480 states and 2177 transitions. [2018-11-14 19:09:27,537 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-14 19:09:27,537 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-14 19:09:27,537 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-14 19:09:27,537 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-14 19:09:27,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1100 states. [2018-11-14 19:09:27,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1100 states to 1100 states and 1687 transitions. [2018-11-14 19:09:27,582 INFO L78 Accepts]: Start accepts. Automaton has 1100 states and 1687 transitions. Word has length 131 [2018-11-14 19:09:27,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-14 19:09:27,582 INFO L480 AbstractCegarLoop]: Abstraction has 1100 states and 1687 transitions. [2018-11-14 19:09:27,582 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-14 19:09:27,582 INFO L276 IsEmpty]: Start isEmpty. Operand 1100 states and 1687 transitions. [2018-11-14 19:09:27,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-14 19:09:27,584 INFO L367 BasicCegarLoop]: Found error trace [2018-11-14 19:09:27,584 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-14 19:09:27,584 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-14 19:09:27,584 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-14 19:09:27,584 INFO L82 PathProgramCache]: Analyzing trace with hash -1060356129, now seen corresponding path program 1 times [2018-11-14 19:09:27,584 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-14 19:09:27,584 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-14 19:09:27,585 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:27,585 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-14 19:09:27,585 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-14 19:09:27,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-14 19:09:27,725 INFO L256 TraceCheckUtils]: 0: Hoare triple {39244#true} call ULTIMATE.init(); {39244#true} is VALID [2018-11-14 19:09:27,726 INFO L273 TraceCheckUtils]: 1: Hoare triple {39244#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 0, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 4, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 8, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 12, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 16, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 20, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 24, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 28, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 32, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 36, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 40, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 44, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 48, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 52, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 56, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 60, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 64, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 68, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 72, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 76, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 80, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 84, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 88, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 92, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset + 96, 4); {39244#true} is VALID [2018-11-14 19:09:27,726 INFO L273 TraceCheckUtils]: 2: Hoare triple {39244#true} assume true; {39244#true} is VALID [2018-11-14 19:09:27,726 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {39244#true} {39244#true} #682#return; {39244#true} is VALID [2018-11-14 19:09:27,726 INFO L256 TraceCheckUtils]: 4: Hoare triple {39244#true} call #t~ret138 := main(); {39244#true} is VALID [2018-11-14 19:09:27,726 INFO L273 TraceCheckUtils]: 5: Hoare triple {39244#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~s~0.offset + 84, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~s~0.offset + 204, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~s~0.offset + 176, 4); {39244#true} is VALID [2018-11-14 19:09:27,726 INFO L256 TraceCheckUtils]: 6: Hoare triple {39244#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {39244#true} is VALID [2018-11-14 19:09:27,727 INFO L273 TraceCheckUtils]: 7: Hoare triple {39244#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, ~s.offset + 52, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, ~s.offset + 92, 4);havoc #t~nondet17;call write~int(8464, ~s.base, ~s.offset + 52, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4); {39244#true} is VALID [2018-11-14 19:09:27,727 INFO L273 TraceCheckUtils]: 8: Hoare triple {39244#true} assume (#t~mem19.base + #t~mem19.offset) % 4294967296 != 0;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~s.offset + 192, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {39244#true} is VALID [2018-11-14 19:09:27,727 INFO L273 TraceCheckUtils]: 9: Hoare triple {39244#true} call #t~mem21 := read~int(~s.base, ~s.offset + 28, 4);call write~int(#t~mem21 + 1, ~s.base, ~s.offset + 28, 4);havoc #t~mem21; {39244#true} is VALID [2018-11-14 19:09:27,727 INFO L273 TraceCheckUtils]: 10: Hoare triple {39244#true} assume !(~bitwiseAnd(~tmp___1~0, 12288) != 0); {39244#true} is VALID [2018-11-14 19:09:27,727 INFO L273 TraceCheckUtils]: 11: Hoare triple {39244#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~s.offset + 136, 4); {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 12: Hoare triple {39244#true} assume !((#t~mem22.base + #t~mem22.offset) % 4294967296 == 0);havoc #t~mem22.base, #t~mem22.offset; {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 13: Hoare triple {39244#true} assume true; {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 14: Hoare triple {39244#true} assume !false; {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 15: Hoare triple {39244#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 16: Hoare triple {39244#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 17: Hoare triple {39244#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 18: Hoare triple {39244#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 19: Hoare triple {39244#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,728 INFO L273 TraceCheckUtils]: 20: Hoare triple {39244#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 21: Hoare triple {39244#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 22: Hoare triple {39244#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 23: Hoare triple {39244#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 24: Hoare triple {39244#true} assume #t~mem32 == 8464;havoc #t~mem32; {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 25: Hoare triple {39244#true} call write~int(0, ~s.base, ~s.offset + 48, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 26: Hoare triple {39244#true} assume ~blastFlag~0 == 0;~blastFlag~0 := 1; {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 27: Hoare triple {39244#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {39244#true} is VALID [2018-11-14 19:09:27,729 INFO L273 TraceCheckUtils]: 28: Hoare triple {39244#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 29: Hoare triple {39244#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 30: Hoare triple {39244#true} ~skip~0 := 0; {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 31: Hoare triple {39244#true} assume true; {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 32: Hoare triple {39244#true} assume !false; {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 33: Hoare triple {39244#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 34: Hoare triple {39244#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 35: Hoare triple {39244#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,730 INFO L273 TraceCheckUtils]: 36: Hoare triple {39244#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 37: Hoare triple {39244#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 38: Hoare triple {39244#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 39: Hoare triple {39244#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 40: Hoare triple {39244#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 41: Hoare triple {39244#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 42: Hoare triple {39244#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 43: Hoare triple {39244#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 44: Hoare triple {39244#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,731 INFO L273 TraceCheckUtils]: 45: Hoare triple {39244#true} assume #t~mem35 == 8496;havoc #t~mem35; {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 46: Hoare triple {39244#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 47: Hoare triple {39244#true} assume ~blastFlag~0 == 1;~blastFlag~0 := 2; {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 48: Hoare triple {39244#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, ~s.offset + 92, 4); {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 49: Hoare triple {39244#true} assume #t~mem71 != 0;havoc #t~mem71;call write~int(8656, ~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 50: Hoare triple {39244#true} call write~int(0, ~s.base, ~s.offset + 64, 4); {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 51: Hoare triple {39244#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 52: Hoare triple {39244#true} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {39244#true} is VALID [2018-11-14 19:09:27,732 INFO L273 TraceCheckUtils]: 53: Hoare triple {39244#true} ~skip~0 := 0; {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 54: Hoare triple {39244#true} assume true; {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 55: Hoare triple {39244#true} assume !false; {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 56: Hoare triple {39244#true} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 57: Hoare triple {39244#true} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 58: Hoare triple {39244#true} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 59: Hoare triple {39244#true} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 60: Hoare triple {39244#true} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 61: Hoare triple {39244#true} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,733 INFO L273 TraceCheckUtils]: 62: Hoare triple {39244#true} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 63: Hoare triple {39244#true} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 64: Hoare triple {39244#true} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 65: Hoare triple {39244#true} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 66: Hoare triple {39244#true} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 67: Hoare triple {39244#true} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 68: Hoare triple {39244#true} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 69: Hoare triple {39244#true} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,734 INFO L273 TraceCheckUtils]: 70: Hoare triple {39244#true} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 71: Hoare triple {39244#true} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 72: Hoare triple {39244#true} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 73: Hoare triple {39244#true} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 74: Hoare triple {39244#true} assume !(#t~mem41 == 8544);havoc #t~mem41;call #t~mem42 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 75: Hoare triple {39244#true} assume !(#t~mem42 == 8545);havoc #t~mem42;call #t~mem43 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 76: Hoare triple {39244#true} assume !(#t~mem43 == 8560);havoc #t~mem43;call #t~mem44 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 77: Hoare triple {39244#true} assume !(#t~mem44 == 8561);havoc #t~mem44;call #t~mem45 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 78: Hoare triple {39244#true} assume !(#t~mem45 == 8448);havoc #t~mem45;call #t~mem46 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,735 INFO L273 TraceCheckUtils]: 79: Hoare triple {39244#true} assume !(#t~mem46 == 8576);havoc #t~mem46;call #t~mem47 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 80: Hoare triple {39244#true} assume !(#t~mem47 == 8577);havoc #t~mem47;call #t~mem48 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 81: Hoare triple {39244#true} assume !(#t~mem48 == 8592);havoc #t~mem48;call #t~mem49 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 82: Hoare triple {39244#true} assume !(#t~mem49 == 8593);havoc #t~mem49;call #t~mem50 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 83: Hoare triple {39244#true} assume !(#t~mem50 == 8608);havoc #t~mem50;call #t~mem51 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 84: Hoare triple {39244#true} assume !(#t~mem51 == 8609);havoc #t~mem51;call #t~mem52 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 85: Hoare triple {39244#true} assume !(#t~mem52 == 8640);havoc #t~mem52;call #t~mem53 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 86: Hoare triple {39244#true} assume !(#t~mem53 == 8641);havoc #t~mem53;call #t~mem54 := read~int(~s.base, ~s.offset + 52, 4); {39244#true} is VALID [2018-11-14 19:09:27,736 INFO L273 TraceCheckUtils]: 87: Hoare triple {39244#true} assume #t~mem54 == 8656;havoc #t~mem54; {39244#true} is VALID [2018-11-14 19:09:27,737 INFO L273 TraceCheckUtils]: 88: Hoare triple {39244#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~s.offset + 176, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, #t~mem118.offset + 604 + 232, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, #t~mem117.offset + 172, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {39244#true} is VALID [2018-11-14 19:09:27,737 INFO L273 TraceCheckUtils]: 89: Hoare triple {39244#true} assume !(~tmp___9~0 == 0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {39244#true} is VALID [2018-11-14 19:09:27,737 INFO L273 TraceCheckUtils]: 90: Hoare triple {39244#true} assume ~blastFlag~0 == 2;~blastFlag~0 := 3; {39244#true} is VALID [2018-11-14 19:09:27,753 INFO L273 TraceCheckUtils]: 91: Hoare triple {39244#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, ~s.offset + 52, 4);call write~int(0, ~s.base, ~s.offset + 64, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,755 INFO L273 TraceCheckUtils]: 92: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(~tmp___10~0 == 0); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,756 INFO L273 TraceCheckUtils]: 93: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~s.offset + 84, 4);call #t~mem128 := read~int(#t~mem127.base, #t~mem127.offset + 604 + 244, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,756 INFO L273 TraceCheckUtils]: 94: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem128 == 0);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,761 INFO L273 TraceCheckUtils]: 95: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,763 INFO L273 TraceCheckUtils]: 96: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume true; {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,766 INFO L273 TraceCheckUtils]: 97: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,766 INFO L273 TraceCheckUtils]: 98: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, ~s.offset + 52, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,766 INFO L273 TraceCheckUtils]: 99: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem24 == 12292);havoc #t~mem24;call #t~mem25 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,767 INFO L273 TraceCheckUtils]: 100: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem25 == 16384);havoc #t~mem25;call #t~mem26 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,767 INFO L273 TraceCheckUtils]: 101: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem26 == 8192);havoc #t~mem26;call #t~mem27 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,767 INFO L273 TraceCheckUtils]: 102: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem27 == 24576);havoc #t~mem27;call #t~mem28 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,768 INFO L273 TraceCheckUtils]: 103: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem28 == 8195);havoc #t~mem28;call #t~mem29 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,768 INFO L273 TraceCheckUtils]: 104: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem29 == 8480);havoc #t~mem29;call #t~mem30 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,768 INFO L273 TraceCheckUtils]: 105: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem30 == 8481);havoc #t~mem30;call #t~mem31 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,768 INFO L273 TraceCheckUtils]: 106: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem31 == 8482);havoc #t~mem31;call #t~mem32 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,769 INFO L273 TraceCheckUtils]: 107: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem32 == 8464);havoc #t~mem32;call #t~mem33 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,769 INFO L273 TraceCheckUtils]: 108: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem33 == 8465);havoc #t~mem33;call #t~mem34 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,770 INFO L273 TraceCheckUtils]: 109: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem34 == 8466);havoc #t~mem34;call #t~mem35 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,770 INFO L273 TraceCheckUtils]: 110: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem35 == 8496);havoc #t~mem35;call #t~mem36 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,771 INFO L273 TraceCheckUtils]: 111: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem36 == 8497);havoc #t~mem36;call #t~mem37 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,771 INFO L273 TraceCheckUtils]: 112: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem37 == 8512);havoc #t~mem37;call #t~mem38 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,772 INFO L273 TraceCheckUtils]: 113: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem38 == 8513);havoc #t~mem38;call #t~mem39 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,772 INFO L273 TraceCheckUtils]: 114: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem39 == 8528);havoc #t~mem39;call #t~mem40 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,773 INFO L273 TraceCheckUtils]: 115: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem40 == 8529);havoc #t~mem40;call #t~mem41 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,773 INFO L273 TraceCheckUtils]: 116: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem41 == 8544);havoc #t~mem41;call #t~mem42 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,774 INFO L273 TraceCheckUtils]: 117: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem42 == 8545);havoc #t~mem42;call #t~mem43 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,774 INFO L273 TraceCheckUtils]: 118: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem43 == 8560);havoc #t~mem43;call #t~mem44 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,775 INFO L273 TraceCheckUtils]: 119: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem44 == 8561);havoc #t~mem44;call #t~mem45 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,775 INFO L273 TraceCheckUtils]: 120: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem45 == 8448);havoc #t~mem45;call #t~mem46 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,776 INFO L273 TraceCheckUtils]: 121: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem46 == 8576);havoc #t~mem46;call #t~mem47 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,776 INFO L273 TraceCheckUtils]: 122: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem47 == 8577);havoc #t~mem47;call #t~mem48 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,777 INFO L273 TraceCheckUtils]: 123: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem48 == 8592);havoc #t~mem48;call #t~mem49 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,777 INFO L273 TraceCheckUtils]: 124: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem49 == 8593);havoc #t~mem49;call #t~mem50 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,778 INFO L273 TraceCheckUtils]: 125: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem50 == 8608);havoc #t~mem50;call #t~mem51 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,778 INFO L273 TraceCheckUtils]: 126: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem51 == 8609);havoc #t~mem51;call #t~mem52 := read~int(~s.base, ~s.offset + 52, 4); {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-14 19:09:27,779 INFO L273 TraceCheckUtils]: 127: Hoare triple {39246#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(#t~mem52 == 8640);havoc #t~mem52;call #t~mem53 := read~int(~s.base, ~s.offset + 52, 4); {39247#(= 8672 |ssl3_accept_#t~mem53|)} is VALID [2018-11-14 19:09:27,780 INFO L273 TraceCheckUtils]: 128: Hoare triple {39247#(= 8672 |ssl3_accept_#t~mem53|)} assume #t~mem53 == 8641;havoc #t~mem53; {39245#false} is VALID [2018-11-14 19:09:27,780 INFO L273 TraceCheckUtils]: 129: Hoare triple {39245#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {39245#false} is VALID [2018-11-14 19:09:27,780 INFO L273 TraceCheckUtils]: 130: Hoare triple {39245#false} assume ~blastFlag~0 == 5; {39245#false} is VALID [2018-11-14 19:09:27,780 INFO L273 TraceCheckUtils]: 131: Hoare triple {39245#false} assume !false; {39245#false} is VALID [2018-11-14 19:09:27,795 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 66 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2018-11-14 19:09:27,795 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-14 19:09:27,795 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-14 19:09:27,795 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 132 [2018-11-14 19:09:27,796 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-14 19:09:27,796 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-14 19:09:27,935 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-14 19:09:27,936 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-14 19:09:27,936 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-14 19:09:27,936 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-14 19:09:27,936 INFO L87 Difference]: Start difference. First operand 1100 states and 1687 transitions. Second operand 4 states.