java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.03_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-18e5b2d-m [2018-11-18 23:38:10,209 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 23:38:10,214 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 23:38:10,233 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 23:38:10,234 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 23:38:10,235 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 23:38:10,236 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 23:38:10,240 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 23:38:10,243 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 23:38:10,248 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 23:38:10,249 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 23:38:10,250 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 23:38:10,251 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 23:38:10,251 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 23:38:10,257 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 23:38:10,258 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 23:38:10,260 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 23:38:10,262 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 23:38:10,267 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 23:38:10,269 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 23:38:10,271 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 23:38:10,273 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 23:38:10,277 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 23:38:10,277 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 23:38:10,277 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 23:38:10,280 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 23:38:10,282 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 23:38:10,283 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 23:38:10,284 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 23:38:10,285 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 23:38:10,285 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 23:38:10,288 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 23:38:10,288 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 23:38:10,288 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 23:38:10,289 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 23:38:10,290 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 23:38:10,291 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-18 23:38:10,315 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 23:38:10,316 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 23:38:10,316 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-18 23:38:10,317 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-18 23:38:10,317 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 23:38:10,317 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 23:38:10,318 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 23:38:10,318 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 23:38:10,318 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 23:38:10,318 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 23:38:10,319 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 23:38:10,319 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 23:38:10,319 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-18 23:38:10,319 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-18 23:38:10,319 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-18 23:38:10,320 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 23:38:10,320 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 23:38:10,320 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 23:38:10,320 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-18 23:38:10,320 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 23:38:10,321 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 23:38:10,321 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-18 23:38:10,321 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-18 23:38:10,321 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 23:38:10,322 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 23:38:10,322 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-18 23:38:10,322 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-18 23:38:10,322 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 23:38:10,322 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-18 23:38:10,323 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-18 23:38:10,323 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-18 23:38:10,369 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 23:38:10,385 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 23:38:10,389 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 23:38:10,391 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 23:38:10,391 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 23:38:10,392 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.03_false-unreach-call.i.cil.c [2018-11-18 23:38:10,461 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b05a0b8db/b24cf1ca11b44aceb6ca705f41de644b/FLAG976158744 [2018-11-18 23:38:11,121 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 23:38:11,125 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.03_false-unreach-call.i.cil.c [2018-11-18 23:38:11,165 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b05a0b8db/b24cf1ca11b44aceb6ca705f41de644b/FLAG976158744 [2018-11-18 23:38:11,420 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b05a0b8db/b24cf1ca11b44aceb6ca705f41de644b [2018-11-18 23:38:11,431 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 23:38:11,432 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-11-18 23:38:11,433 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 23:38:11,434 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 23:38:11,437 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 23:38:11,439 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:38:11" (1/1) ... [2018-11-18 23:38:11,442 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@21e323d8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:11, skipping insertion in model container [2018-11-18 23:38:11,442 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:38:11" (1/1) ... [2018-11-18 23:38:11,453 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 23:38:11,536 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 23:38:12,066 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 23:38:12,178 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 23:38:12,362 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 23:38:12,412 INFO L195 MainTranslator]: Completed translation [2018-11-18 23:38:12,413 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12 WrapperNode [2018-11-18 23:38:12,413 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 23:38:12,414 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 23:38:12,414 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 23:38:12,414 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 23:38:12,429 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,429 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,460 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,460 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,572 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,592 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,601 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... [2018-11-18 23:38:12,615 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 23:38:12,619 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 23:38:12,619 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 23:38:12,620 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 23:38:12,624 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 23:38:12,714 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-18 23:38:12,715 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 23:38:12,715 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_get_server_method [2018-11-18 23:38:12,715 INFO L138 BoogieDeclarations]: Found implementation of procedure SSLv3_server_method [2018-11-18 23:38:12,716 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-18 23:38:12,716 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-18 23:38:12,716 INFO L138 BoogieDeclarations]: Found implementation of procedure sslv3_base_method [2018-11-18 23:38:12,716 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-18 23:38:12,717 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-18 23:38:12,717 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-18 23:38:12,717 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-18 23:38:12,717 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_char [2018-11-18 23:38:12,717 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-18 23:38:12,717 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_long [2018-11-18 23:38:12,718 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-18 23:38:12,718 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-18 23:38:12,718 INFO L130 BoogieDeclarations]: Found specification of procedure SSLv3_server_method [2018-11-18 23:38:12,718 INFO L130 BoogieDeclarations]: Found specification of procedure sslv3_base_method [2018-11-18 23:38:12,718 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-18 23:38:12,719 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_get_server_method [2018-11-18 23:38:12,719 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-18 23:38:12,719 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-18 23:38:12,719 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-18 23:38:12,720 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 23:38:12,720 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-18 23:38:12,720 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-18 23:38:12,720 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-18 23:38:12,720 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-18 23:38:12,720 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-18 23:38:12,721 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-18 23:38:12,721 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-18 23:38:12,721 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 23:38:12,721 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-18 23:38:13,658 WARN L687 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-18 23:38:13,659 WARN L652 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-18 23:38:16,623 INFO L280 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 23:38:16,623 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:38:16 BoogieIcfgContainer [2018-11-18 23:38:16,623 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 23:38:16,624 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-18 23:38:16,625 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-18 23:38:16,628 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-18 23:38:16,628 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 11:38:11" (1/3) ... [2018-11-18 23:38:16,629 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3fa0e666 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:38:16, skipping insertion in model container [2018-11-18 23:38:16,629 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:38:12" (2/3) ... [2018-11-18 23:38:16,630 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3fa0e666 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 11:38:16, skipping insertion in model container [2018-11-18 23:38:16,630 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:38:16" (3/3) ... [2018-11-18 23:38:16,632 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.03_false-unreach-call.i.cil.c [2018-11-18 23:38:16,642 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-18 23:38:16,650 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-18 23:38:16,664 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-18 23:38:16,699 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 23:38:16,700 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-18 23:38:16,700 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-18 23:38:16,700 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-18 23:38:16,700 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 23:38:16,701 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 23:38:16,701 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-18 23:38:16,701 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 23:38:16,701 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-18 23:38:16,725 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states. [2018-11-18 23:38:16,737 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-18 23:38:16,737 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:16,738 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:16,741 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:16,747 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:16,748 INFO L82 PathProgramCache]: Analyzing trace with hash -486488910, now seen corresponding path program 1 times [2018-11-18 23:38:16,750 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:16,751 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:16,809 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:16,809 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:16,809 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:17,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:17,760 INFO L256 TraceCheckUtils]: 0: Hoare triple {156#true} call ULTIMATE.init(); {156#true} is VALID [2018-11-18 23:38:17,764 INFO L273 TraceCheckUtils]: 1: Hoare triple {156#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {156#true} is VALID [2018-11-18 23:38:17,765 INFO L273 TraceCheckUtils]: 2: Hoare triple {156#true} assume true; {156#true} is VALID [2018-11-18 23:38:17,766 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {156#true} {156#true} #649#return; {156#true} is VALID [2018-11-18 23:38:17,766 INFO L256 TraceCheckUtils]: 4: Hoare triple {156#true} call #t~ret138 := main(); {156#true} is VALID [2018-11-18 23:38:17,766 INFO L273 TraceCheckUtils]: 5: Hoare triple {156#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {156#true} is VALID [2018-11-18 23:38:17,767 INFO L256 TraceCheckUtils]: 6: Hoare triple {156#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {156#true} is VALID [2018-11-18 23:38:17,781 INFO L273 TraceCheckUtils]: 7: Hoare triple {156#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,786 INFO L273 TraceCheckUtils]: 8: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,792 INFO L273 TraceCheckUtils]: 9: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,805 INFO L273 TraceCheckUtils]: 10: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,806 INFO L273 TraceCheckUtils]: 11: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,824 INFO L273 TraceCheckUtils]: 12: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,839 INFO L273 TraceCheckUtils]: 13: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume true; {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,841 INFO L273 TraceCheckUtils]: 14: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !false; {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,841 INFO L273 TraceCheckUtils]: 15: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,843 INFO L273 TraceCheckUtils]: 16: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,843 INFO L273 TraceCheckUtils]: 17: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,845 INFO L273 TraceCheckUtils]: 18: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,845 INFO L273 TraceCheckUtils]: 19: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,847 INFO L273 TraceCheckUtils]: 20: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,848 INFO L273 TraceCheckUtils]: 21: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,857 INFO L273 TraceCheckUtils]: 22: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:17,859 INFO L273 TraceCheckUtils]: 23: Hoare triple {158#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 |ssl3_accept_#t~mem32|)} is VALID [2018-11-18 23:38:17,859 INFO L273 TraceCheckUtils]: 24: Hoare triple {159#(= 8464 |ssl3_accept_#t~mem32|)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,860 INFO L273 TraceCheckUtils]: 25: Hoare triple {157#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,860 INFO L273 TraceCheckUtils]: 26: Hoare triple {157#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,860 INFO L273 TraceCheckUtils]: 27: Hoare triple {157#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,861 INFO L273 TraceCheckUtils]: 28: Hoare triple {157#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,862 INFO L273 TraceCheckUtils]: 29: Hoare triple {157#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,862 INFO L273 TraceCheckUtils]: 30: Hoare triple {157#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,863 INFO L273 TraceCheckUtils]: 31: Hoare triple {157#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,863 INFO L273 TraceCheckUtils]: 32: Hoare triple {157#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,864 INFO L273 TraceCheckUtils]: 33: Hoare triple {157#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,864 INFO L273 TraceCheckUtils]: 34: Hoare triple {157#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,864 INFO L273 TraceCheckUtils]: 35: Hoare triple {157#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,865 INFO L273 TraceCheckUtils]: 36: Hoare triple {157#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,865 INFO L273 TraceCheckUtils]: 37: Hoare triple {157#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,866 INFO L273 TraceCheckUtils]: 38: Hoare triple {157#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,866 INFO L273 TraceCheckUtils]: 39: Hoare triple {157#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,866 INFO L273 TraceCheckUtils]: 40: Hoare triple {157#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,867 INFO L273 TraceCheckUtils]: 41: Hoare triple {157#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,867 INFO L273 TraceCheckUtils]: 42: Hoare triple {157#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,867 INFO L273 TraceCheckUtils]: 43: Hoare triple {157#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,868 INFO L273 TraceCheckUtils]: 44: Hoare triple {157#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,868 INFO L273 TraceCheckUtils]: 45: Hoare triple {157#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,868 INFO L273 TraceCheckUtils]: 46: Hoare triple {157#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,869 INFO L273 TraceCheckUtils]: 47: Hoare triple {157#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {157#false} is VALID [2018-11-18 23:38:17,869 INFO L273 TraceCheckUtils]: 48: Hoare triple {157#false} assume 8672 == #t~mem56;havoc #t~mem56; {157#false} is VALID [2018-11-18 23:38:17,870 INFO L273 TraceCheckUtils]: 49: Hoare triple {157#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {157#false} is VALID [2018-11-18 23:38:17,870 INFO L273 TraceCheckUtils]: 50: Hoare triple {157#false} assume 3 == ~blastFlag~0; {157#false} is VALID [2018-11-18 23:38:17,870 INFO L273 TraceCheckUtils]: 51: Hoare triple {157#false} assume !false; {157#false} is VALID [2018-11-18 23:38:17,899 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:17,902 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:17,902 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:17,908 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 52 [2018-11-18 23:38:17,911 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:17,915 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:18,216 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:18,216 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:18,224 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:18,224 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:18,227 INFO L87 Difference]: Start difference. First operand 153 states. Second operand 4 states. [2018-11-18 23:38:21,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:21,299 INFO L93 Difference]: Finished difference Result 326 states and 541 transitions. [2018-11-18 23:38:21,299 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:21,299 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 52 [2018-11-18 23:38:21,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:21,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:21,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 541 transitions. [2018-11-18 23:38:21,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:21,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 541 transitions. [2018-11-18 23:38:21,342 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 541 transitions. [2018-11-18 23:38:22,400 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 541 edges. 541 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:22,428 INFO L225 Difference]: With dead ends: 326 [2018-11-18 23:38:22,428 INFO L226 Difference]: Without dead ends: 166 [2018-11-18 23:38:22,433 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:22,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-18 23:38:22,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-18 23:38:22,547 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:22,548 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand 149 states. [2018-11-18 23:38:22,548 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand 149 states. [2018-11-18 23:38:22,548 INFO L87 Difference]: Start difference. First operand 166 states. Second operand 149 states. [2018-11-18 23:38:22,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:22,559 INFO L93 Difference]: Finished difference Result 166 states and 245 transitions. [2018-11-18 23:38:22,560 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 245 transitions. [2018-11-18 23:38:22,561 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:22,562 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:22,562 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 166 states. [2018-11-18 23:38:22,562 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 166 states. [2018-11-18 23:38:22,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:22,573 INFO L93 Difference]: Finished difference Result 166 states and 245 transitions. [2018-11-18 23:38:22,573 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 245 transitions. [2018-11-18 23:38:22,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:22,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:22,575 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:22,575 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:22,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:22,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 224 transitions. [2018-11-18 23:38:22,585 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 224 transitions. Word has length 52 [2018-11-18 23:38:22,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:22,585 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 224 transitions. [2018-11-18 23:38:22,586 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:22,586 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 224 transitions. [2018-11-18 23:38:22,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-18 23:38:22,588 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:22,589 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:22,589 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:22,589 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:22,590 INFO L82 PathProgramCache]: Analyzing trace with hash 752709759, now seen corresponding path program 1 times [2018-11-18 23:38:22,590 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:22,590 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:22,592 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:22,592 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:22,592 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:22,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:22,848 INFO L256 TraceCheckUtils]: 0: Hoare triple {1066#true} call ULTIMATE.init(); {1066#true} is VALID [2018-11-18 23:38:22,849 INFO L273 TraceCheckUtils]: 1: Hoare triple {1066#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1066#true} is VALID [2018-11-18 23:38:22,849 INFO L273 TraceCheckUtils]: 2: Hoare triple {1066#true} assume true; {1066#true} is VALID [2018-11-18 23:38:22,849 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1066#true} {1066#true} #649#return; {1066#true} is VALID [2018-11-18 23:38:22,850 INFO L256 TraceCheckUtils]: 4: Hoare triple {1066#true} call #t~ret138 := main(); {1066#true} is VALID [2018-11-18 23:38:22,850 INFO L273 TraceCheckUtils]: 5: Hoare triple {1066#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {1066#true} is VALID [2018-11-18 23:38:22,850 INFO L256 TraceCheckUtils]: 6: Hoare triple {1066#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1066#true} is VALID [2018-11-18 23:38:22,852 INFO L273 TraceCheckUtils]: 7: Hoare triple {1066#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,854 INFO L273 TraceCheckUtils]: 8: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,855 INFO L273 TraceCheckUtils]: 9: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,857 INFO L273 TraceCheckUtils]: 10: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,862 INFO L273 TraceCheckUtils]: 11: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,862 INFO L273 TraceCheckUtils]: 12: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,863 INFO L273 TraceCheckUtils]: 13: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,863 INFO L273 TraceCheckUtils]: 14: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,864 INFO L273 TraceCheckUtils]: 15: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,865 INFO L273 TraceCheckUtils]: 16: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,866 INFO L273 TraceCheckUtils]: 17: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,867 INFO L273 TraceCheckUtils]: 18: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,868 INFO L273 TraceCheckUtils]: 19: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:22,869 INFO L273 TraceCheckUtils]: 20: Hoare triple {1068#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1069#(= |ssl3_accept_#t~mem29| 8464)} is VALID [2018-11-18 23:38:22,870 INFO L273 TraceCheckUtils]: 21: Hoare triple {1069#(= |ssl3_accept_#t~mem29| 8464)} assume 8480 == #t~mem29;havoc #t~mem29; {1067#false} is VALID [2018-11-18 23:38:22,871 INFO L273 TraceCheckUtils]: 22: Hoare triple {1067#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {1067#false} is VALID [2018-11-18 23:38:22,872 INFO L273 TraceCheckUtils]: 23: Hoare triple {1067#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,872 INFO L273 TraceCheckUtils]: 24: Hoare triple {1067#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,873 INFO L273 TraceCheckUtils]: 25: Hoare triple {1067#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1067#false} is VALID [2018-11-18 23:38:22,873 INFO L273 TraceCheckUtils]: 26: Hoare triple {1067#false} ~skip~0 := 0; {1067#false} is VALID [2018-11-18 23:38:22,874 INFO L273 TraceCheckUtils]: 27: Hoare triple {1067#false} assume true; {1067#false} is VALID [2018-11-18 23:38:22,874 INFO L273 TraceCheckUtils]: 28: Hoare triple {1067#false} assume !false; {1067#false} is VALID [2018-11-18 23:38:22,875 INFO L273 TraceCheckUtils]: 29: Hoare triple {1067#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,875 INFO L273 TraceCheckUtils]: 30: Hoare triple {1067#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,875 INFO L273 TraceCheckUtils]: 31: Hoare triple {1067#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,875 INFO L273 TraceCheckUtils]: 32: Hoare triple {1067#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,876 INFO L273 TraceCheckUtils]: 33: Hoare triple {1067#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,876 INFO L273 TraceCheckUtils]: 34: Hoare triple {1067#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,876 INFO L273 TraceCheckUtils]: 35: Hoare triple {1067#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,876 INFO L273 TraceCheckUtils]: 36: Hoare triple {1067#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,877 INFO L273 TraceCheckUtils]: 37: Hoare triple {1067#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,877 INFO L273 TraceCheckUtils]: 38: Hoare triple {1067#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,877 INFO L273 TraceCheckUtils]: 39: Hoare triple {1067#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,878 INFO L273 TraceCheckUtils]: 40: Hoare triple {1067#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,878 INFO L273 TraceCheckUtils]: 41: Hoare triple {1067#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,878 INFO L273 TraceCheckUtils]: 42: Hoare triple {1067#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,878 INFO L273 TraceCheckUtils]: 43: Hoare triple {1067#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,879 INFO L273 TraceCheckUtils]: 44: Hoare triple {1067#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,879 INFO L273 TraceCheckUtils]: 45: Hoare triple {1067#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,879 INFO L273 TraceCheckUtils]: 46: Hoare triple {1067#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,880 INFO L273 TraceCheckUtils]: 47: Hoare triple {1067#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,880 INFO L273 TraceCheckUtils]: 48: Hoare triple {1067#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,880 INFO L273 TraceCheckUtils]: 49: Hoare triple {1067#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,880 INFO L273 TraceCheckUtils]: 50: Hoare triple {1067#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,881 INFO L273 TraceCheckUtils]: 51: Hoare triple {1067#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,881 INFO L273 TraceCheckUtils]: 52: Hoare triple {1067#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,881 INFO L273 TraceCheckUtils]: 53: Hoare triple {1067#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,881 INFO L273 TraceCheckUtils]: 54: Hoare triple {1067#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,882 INFO L273 TraceCheckUtils]: 55: Hoare triple {1067#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,882 INFO L273 TraceCheckUtils]: 56: Hoare triple {1067#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,882 INFO L273 TraceCheckUtils]: 57: Hoare triple {1067#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,883 INFO L273 TraceCheckUtils]: 58: Hoare triple {1067#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,883 INFO L273 TraceCheckUtils]: 59: Hoare triple {1067#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,883 INFO L273 TraceCheckUtils]: 60: Hoare triple {1067#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,883 INFO L273 TraceCheckUtils]: 61: Hoare triple {1067#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {1067#false} is VALID [2018-11-18 23:38:22,884 INFO L273 TraceCheckUtils]: 62: Hoare triple {1067#false} assume 8672 == #t~mem56;havoc #t~mem56; {1067#false} is VALID [2018-11-18 23:38:22,884 INFO L273 TraceCheckUtils]: 63: Hoare triple {1067#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {1067#false} is VALID [2018-11-18 23:38:22,884 INFO L273 TraceCheckUtils]: 64: Hoare triple {1067#false} assume 3 == ~blastFlag~0; {1067#false} is VALID [2018-11-18 23:38:22,885 INFO L273 TraceCheckUtils]: 65: Hoare triple {1067#false} assume !false; {1067#false} is VALID [2018-11-18 23:38:22,900 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:22,900 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:22,900 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:22,903 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-18 23:38:22,903 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:22,904 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:23,090 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:23,090 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:23,090 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:23,091 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:23,091 INFO L87 Difference]: Start difference. First operand 149 states and 224 transitions. Second operand 4 states. [2018-11-18 23:38:25,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:25,452 INFO L93 Difference]: Finished difference Result 289 states and 432 transitions. [2018-11-18 23:38:25,452 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:25,453 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-18 23:38:25,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:25,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:25,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 432 transitions. [2018-11-18 23:38:25,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:25,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 432 transitions. [2018-11-18 23:38:25,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 432 transitions. [2018-11-18 23:38:26,239 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 432 edges. 432 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:26,247 INFO L225 Difference]: With dead ends: 289 [2018-11-18 23:38:26,249 INFO L226 Difference]: Without dead ends: 166 [2018-11-18 23:38:26,250 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:26,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-18 23:38:26,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-18 23:38:26,286 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:26,286 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand 149 states. [2018-11-18 23:38:26,286 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand 149 states. [2018-11-18 23:38:26,286 INFO L87 Difference]: Start difference. First operand 166 states. Second operand 149 states. [2018-11-18 23:38:26,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:26,293 INFO L93 Difference]: Finished difference Result 166 states and 244 transitions. [2018-11-18 23:38:26,293 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 244 transitions. [2018-11-18 23:38:26,294 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:26,294 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:26,295 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 166 states. [2018-11-18 23:38:26,295 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 166 states. [2018-11-18 23:38:26,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:26,301 INFO L93 Difference]: Finished difference Result 166 states and 244 transitions. [2018-11-18 23:38:26,302 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 244 transitions. [2018-11-18 23:38:26,303 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:26,303 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:26,303 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:26,303 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:26,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:26,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 223 transitions. [2018-11-18 23:38:26,309 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 223 transitions. Word has length 66 [2018-11-18 23:38:26,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:26,309 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 223 transitions. [2018-11-18 23:38:26,309 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:26,310 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 223 transitions. [2018-11-18 23:38:26,311 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-18 23:38:26,311 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:26,312 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:26,312 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:26,312 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:26,312 INFO L82 PathProgramCache]: Analyzing trace with hash -157503059, now seen corresponding path program 1 times [2018-11-18 23:38:26,313 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:26,313 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:26,314 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:26,314 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:26,315 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:26,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:26,537 INFO L256 TraceCheckUtils]: 0: Hoare triple {1932#true} call ULTIMATE.init(); {1932#true} is VALID [2018-11-18 23:38:26,538 INFO L273 TraceCheckUtils]: 1: Hoare triple {1932#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1932#true} is VALID [2018-11-18 23:38:26,538 INFO L273 TraceCheckUtils]: 2: Hoare triple {1932#true} assume true; {1932#true} is VALID [2018-11-18 23:38:26,539 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1932#true} {1932#true} #649#return; {1932#true} is VALID [2018-11-18 23:38:26,539 INFO L256 TraceCheckUtils]: 4: Hoare triple {1932#true} call #t~ret138 := main(); {1932#true} is VALID [2018-11-18 23:38:26,540 INFO L273 TraceCheckUtils]: 5: Hoare triple {1932#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {1932#true} is VALID [2018-11-18 23:38:26,540 INFO L256 TraceCheckUtils]: 6: Hoare triple {1932#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1932#true} is VALID [2018-11-18 23:38:26,550 INFO L273 TraceCheckUtils]: 7: Hoare triple {1932#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,557 INFO L273 TraceCheckUtils]: 8: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,559 INFO L273 TraceCheckUtils]: 9: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,562 INFO L273 TraceCheckUtils]: 10: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,562 INFO L273 TraceCheckUtils]: 11: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,563 INFO L273 TraceCheckUtils]: 12: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,563 INFO L273 TraceCheckUtils]: 13: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,564 INFO L273 TraceCheckUtils]: 14: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:26,564 INFO L273 TraceCheckUtils]: 15: Hoare triple {1934#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1935#(= |ssl3_accept_#t~mem24| 8464)} is VALID [2018-11-18 23:38:26,565 INFO L273 TraceCheckUtils]: 16: Hoare triple {1935#(= |ssl3_accept_#t~mem24| 8464)} assume 12292 == #t~mem24;havoc #t~mem24; {1933#false} is VALID [2018-11-18 23:38:26,565 INFO L273 TraceCheckUtils]: 17: Hoare triple {1933#false} call write~int(1, ~s.base, 40 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,565 INFO L273 TraceCheckUtils]: 18: Hoare triple {1933#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,565 INFO L273 TraceCheckUtils]: 19: Hoare triple {1933#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {1933#false} is VALID [2018-11-18 23:38:26,566 INFO L273 TraceCheckUtils]: 20: Hoare triple {1933#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,566 INFO L273 TraceCheckUtils]: 21: Hoare triple {1933#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,566 INFO L273 TraceCheckUtils]: 22: Hoare triple {1933#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {1933#false} is VALID [2018-11-18 23:38:26,566 INFO L273 TraceCheckUtils]: 23: Hoare triple {1933#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,566 INFO L273 TraceCheckUtils]: 24: Hoare triple {1933#false} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,567 INFO L273 TraceCheckUtils]: 25: Hoare triple {1933#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,567 INFO L273 TraceCheckUtils]: 26: Hoare triple {1933#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1933#false} is VALID [2018-11-18 23:38:26,567 INFO L273 TraceCheckUtils]: 27: Hoare triple {1933#false} ~skip~0 := 0; {1933#false} is VALID [2018-11-18 23:38:26,567 INFO L273 TraceCheckUtils]: 28: Hoare triple {1933#false} assume true; {1933#false} is VALID [2018-11-18 23:38:26,568 INFO L273 TraceCheckUtils]: 29: Hoare triple {1933#false} assume !false; {1933#false} is VALID [2018-11-18 23:38:26,568 INFO L273 TraceCheckUtils]: 30: Hoare triple {1933#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,568 INFO L273 TraceCheckUtils]: 31: Hoare triple {1933#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,568 INFO L273 TraceCheckUtils]: 32: Hoare triple {1933#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,568 INFO L273 TraceCheckUtils]: 33: Hoare triple {1933#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,569 INFO L273 TraceCheckUtils]: 34: Hoare triple {1933#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,569 INFO L273 TraceCheckUtils]: 35: Hoare triple {1933#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,569 INFO L273 TraceCheckUtils]: 36: Hoare triple {1933#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,569 INFO L273 TraceCheckUtils]: 37: Hoare triple {1933#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,569 INFO L273 TraceCheckUtils]: 38: Hoare triple {1933#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,569 INFO L273 TraceCheckUtils]: 39: Hoare triple {1933#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,570 INFO L273 TraceCheckUtils]: 40: Hoare triple {1933#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,570 INFO L273 TraceCheckUtils]: 41: Hoare triple {1933#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,570 INFO L273 TraceCheckUtils]: 42: Hoare triple {1933#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,570 INFO L273 TraceCheckUtils]: 43: Hoare triple {1933#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,570 INFO L273 TraceCheckUtils]: 44: Hoare triple {1933#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,571 INFO L273 TraceCheckUtils]: 45: Hoare triple {1933#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,571 INFO L273 TraceCheckUtils]: 46: Hoare triple {1933#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,571 INFO L273 TraceCheckUtils]: 47: Hoare triple {1933#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,571 INFO L273 TraceCheckUtils]: 48: Hoare triple {1933#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,571 INFO L273 TraceCheckUtils]: 49: Hoare triple {1933#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,572 INFO L273 TraceCheckUtils]: 50: Hoare triple {1933#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,572 INFO L273 TraceCheckUtils]: 51: Hoare triple {1933#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,572 INFO L273 TraceCheckUtils]: 52: Hoare triple {1933#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,572 INFO L273 TraceCheckUtils]: 53: Hoare triple {1933#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,572 INFO L273 TraceCheckUtils]: 54: Hoare triple {1933#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,572 INFO L273 TraceCheckUtils]: 55: Hoare triple {1933#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,573 INFO L273 TraceCheckUtils]: 56: Hoare triple {1933#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,573 INFO L273 TraceCheckUtils]: 57: Hoare triple {1933#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,573 INFO L273 TraceCheckUtils]: 58: Hoare triple {1933#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,573 INFO L273 TraceCheckUtils]: 59: Hoare triple {1933#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,573 INFO L273 TraceCheckUtils]: 60: Hoare triple {1933#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,573 INFO L273 TraceCheckUtils]: 61: Hoare triple {1933#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,574 INFO L273 TraceCheckUtils]: 62: Hoare triple {1933#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {1933#false} is VALID [2018-11-18 23:38:26,574 INFO L273 TraceCheckUtils]: 63: Hoare triple {1933#false} assume 8672 == #t~mem56;havoc #t~mem56; {1933#false} is VALID [2018-11-18 23:38:26,574 INFO L273 TraceCheckUtils]: 64: Hoare triple {1933#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {1933#false} is VALID [2018-11-18 23:38:26,574 INFO L273 TraceCheckUtils]: 65: Hoare triple {1933#false} assume 3 == ~blastFlag~0; {1933#false} is VALID [2018-11-18 23:38:26,575 INFO L273 TraceCheckUtils]: 66: Hoare triple {1933#false} assume !false; {1933#false} is VALID [2018-11-18 23:38:26,580 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:26,580 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:26,581 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:26,581 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:26,581 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:26,582 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:26,671 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:26,671 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:26,672 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:26,672 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:26,672 INFO L87 Difference]: Start difference. First operand 149 states and 223 transitions. Second operand 4 states. [2018-11-18 23:38:29,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:29,133 INFO L93 Difference]: Finished difference Result 288 states and 430 transitions. [2018-11-18 23:38:29,133 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:29,133 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:29,134 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:29,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:29,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 430 transitions. [2018-11-18 23:38:29,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:29,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 430 transitions. [2018-11-18 23:38:29,145 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 430 transitions. [2018-11-18 23:38:29,921 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 430 edges. 430 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:29,924 INFO L225 Difference]: With dead ends: 288 [2018-11-18 23:38:29,926 INFO L226 Difference]: Without dead ends: 165 [2018-11-18 23:38:29,927 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:29,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2018-11-18 23:38:29,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 149. [2018-11-18 23:38:29,968 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:29,968 INFO L82 GeneralOperation]: Start isEquivalent. First operand 165 states. Second operand 149 states. [2018-11-18 23:38:29,969 INFO L74 IsIncluded]: Start isIncluded. First operand 165 states. Second operand 149 states. [2018-11-18 23:38:29,969 INFO L87 Difference]: Start difference. First operand 165 states. Second operand 149 states. [2018-11-18 23:38:29,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:29,974 INFO L93 Difference]: Finished difference Result 165 states and 242 transitions. [2018-11-18 23:38:29,974 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 242 transitions. [2018-11-18 23:38:29,975 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:29,975 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:29,975 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 165 states. [2018-11-18 23:38:29,975 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 165 states. [2018-11-18 23:38:29,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:29,982 INFO L93 Difference]: Finished difference Result 165 states and 242 transitions. [2018-11-18 23:38:29,982 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 242 transitions. [2018-11-18 23:38:29,982 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:29,983 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:29,983 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:29,983 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:29,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:29,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 222 transitions. [2018-11-18 23:38:29,988 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 222 transitions. Word has length 67 [2018-11-18 23:38:29,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:29,989 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 222 transitions. [2018-11-18 23:38:29,989 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:29,989 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 222 transitions. [2018-11-18 23:38:29,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-18 23:38:29,990 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:29,990 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:29,991 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:29,991 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:29,991 INFO L82 PathProgramCache]: Analyzing trace with hash 51027097, now seen corresponding path program 1 times [2018-11-18 23:38:29,991 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:29,991 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:29,993 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:29,993 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:29,993 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:30,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:30,536 INFO L256 TraceCheckUtils]: 0: Hoare triple {2794#true} call ULTIMATE.init(); {2794#true} is VALID [2018-11-18 23:38:30,537 INFO L273 TraceCheckUtils]: 1: Hoare triple {2794#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {2794#true} is VALID [2018-11-18 23:38:30,537 INFO L273 TraceCheckUtils]: 2: Hoare triple {2794#true} assume true; {2794#true} is VALID [2018-11-18 23:38:30,538 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2794#true} {2794#true} #649#return; {2794#true} is VALID [2018-11-18 23:38:30,538 INFO L256 TraceCheckUtils]: 4: Hoare triple {2794#true} call #t~ret138 := main(); {2794#true} is VALID [2018-11-18 23:38:30,538 INFO L273 TraceCheckUtils]: 5: Hoare triple {2794#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {2794#true} is VALID [2018-11-18 23:38:30,539 INFO L256 TraceCheckUtils]: 6: Hoare triple {2794#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {2794#true} is VALID [2018-11-18 23:38:30,541 INFO L273 TraceCheckUtils]: 7: Hoare triple {2794#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,541 INFO L273 TraceCheckUtils]: 8: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,542 INFO L273 TraceCheckUtils]: 9: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,543 INFO L273 TraceCheckUtils]: 10: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,543 INFO L273 TraceCheckUtils]: 11: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,543 INFO L273 TraceCheckUtils]: 12: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,544 INFO L273 TraceCheckUtils]: 13: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,544 INFO L273 TraceCheckUtils]: 14: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,544 INFO L273 TraceCheckUtils]: 15: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:30,545 INFO L273 TraceCheckUtils]: 16: Hoare triple {2796#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= |ssl3_accept_#t~mem25| 8464)} is VALID [2018-11-18 23:38:30,546 INFO L273 TraceCheckUtils]: 17: Hoare triple {2797#(= |ssl3_accept_#t~mem25| 8464)} assume 16384 == #t~mem25;havoc #t~mem25; {2795#false} is VALID [2018-11-18 23:38:30,546 INFO L273 TraceCheckUtils]: 18: Hoare triple {2795#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,546 INFO L273 TraceCheckUtils]: 19: Hoare triple {2795#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {2795#false} is VALID [2018-11-18 23:38:30,547 INFO L273 TraceCheckUtils]: 20: Hoare triple {2795#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,547 INFO L273 TraceCheckUtils]: 21: Hoare triple {2795#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,547 INFO L273 TraceCheckUtils]: 22: Hoare triple {2795#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {2795#false} is VALID [2018-11-18 23:38:30,548 INFO L273 TraceCheckUtils]: 23: Hoare triple {2795#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,548 INFO L273 TraceCheckUtils]: 24: Hoare triple {2795#false} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,549 INFO L273 TraceCheckUtils]: 25: Hoare triple {2795#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,549 INFO L273 TraceCheckUtils]: 26: Hoare triple {2795#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {2795#false} is VALID [2018-11-18 23:38:30,549 INFO L273 TraceCheckUtils]: 27: Hoare triple {2795#false} ~skip~0 := 0; {2795#false} is VALID [2018-11-18 23:38:30,549 INFO L273 TraceCheckUtils]: 28: Hoare triple {2795#false} assume true; {2795#false} is VALID [2018-11-18 23:38:30,549 INFO L273 TraceCheckUtils]: 29: Hoare triple {2795#false} assume !false; {2795#false} is VALID [2018-11-18 23:38:30,550 INFO L273 TraceCheckUtils]: 30: Hoare triple {2795#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,550 INFO L273 TraceCheckUtils]: 31: Hoare triple {2795#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,550 INFO L273 TraceCheckUtils]: 32: Hoare triple {2795#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,550 INFO L273 TraceCheckUtils]: 33: Hoare triple {2795#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,551 INFO L273 TraceCheckUtils]: 34: Hoare triple {2795#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,551 INFO L273 TraceCheckUtils]: 35: Hoare triple {2795#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,551 INFO L273 TraceCheckUtils]: 36: Hoare triple {2795#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,551 INFO L273 TraceCheckUtils]: 37: Hoare triple {2795#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,551 INFO L273 TraceCheckUtils]: 38: Hoare triple {2795#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,552 INFO L273 TraceCheckUtils]: 39: Hoare triple {2795#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,552 INFO L273 TraceCheckUtils]: 40: Hoare triple {2795#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,552 INFO L273 TraceCheckUtils]: 41: Hoare triple {2795#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,552 INFO L273 TraceCheckUtils]: 42: Hoare triple {2795#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,552 INFO L273 TraceCheckUtils]: 43: Hoare triple {2795#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,553 INFO L273 TraceCheckUtils]: 44: Hoare triple {2795#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,553 INFO L273 TraceCheckUtils]: 45: Hoare triple {2795#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,553 INFO L273 TraceCheckUtils]: 46: Hoare triple {2795#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,553 INFO L273 TraceCheckUtils]: 47: Hoare triple {2795#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,554 INFO L273 TraceCheckUtils]: 48: Hoare triple {2795#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,554 INFO L273 TraceCheckUtils]: 49: Hoare triple {2795#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,554 INFO L273 TraceCheckUtils]: 50: Hoare triple {2795#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,554 INFO L273 TraceCheckUtils]: 51: Hoare triple {2795#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,554 INFO L273 TraceCheckUtils]: 52: Hoare triple {2795#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,555 INFO L273 TraceCheckUtils]: 53: Hoare triple {2795#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,555 INFO L273 TraceCheckUtils]: 54: Hoare triple {2795#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,555 INFO L273 TraceCheckUtils]: 55: Hoare triple {2795#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,555 INFO L273 TraceCheckUtils]: 56: Hoare triple {2795#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,556 INFO L273 TraceCheckUtils]: 57: Hoare triple {2795#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,556 INFO L273 TraceCheckUtils]: 58: Hoare triple {2795#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,556 INFO L273 TraceCheckUtils]: 59: Hoare triple {2795#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,556 INFO L273 TraceCheckUtils]: 60: Hoare triple {2795#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,556 INFO L273 TraceCheckUtils]: 61: Hoare triple {2795#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,557 INFO L273 TraceCheckUtils]: 62: Hoare triple {2795#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {2795#false} is VALID [2018-11-18 23:38:30,557 INFO L273 TraceCheckUtils]: 63: Hoare triple {2795#false} assume 8672 == #t~mem56;havoc #t~mem56; {2795#false} is VALID [2018-11-18 23:38:30,557 INFO L273 TraceCheckUtils]: 64: Hoare triple {2795#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {2795#false} is VALID [2018-11-18 23:38:30,557 INFO L273 TraceCheckUtils]: 65: Hoare triple {2795#false} assume 3 == ~blastFlag~0; {2795#false} is VALID [2018-11-18 23:38:30,557 INFO L273 TraceCheckUtils]: 66: Hoare triple {2795#false} assume !false; {2795#false} is VALID [2018-11-18 23:38:30,561 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:30,561 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:30,561 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:30,562 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:30,562 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:30,562 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:30,635 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:30,636 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:30,636 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:30,636 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:30,636 INFO L87 Difference]: Start difference. First operand 149 states and 222 transitions. Second operand 4 states. [2018-11-18 23:38:32,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:32,696 INFO L93 Difference]: Finished difference Result 288 states and 429 transitions. [2018-11-18 23:38:32,696 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:32,696 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:32,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:32,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:32,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 429 transitions. [2018-11-18 23:38:32,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:32,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 429 transitions. [2018-11-18 23:38:32,707 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 429 transitions. [2018-11-18 23:38:33,416 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 429 edges. 429 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:33,420 INFO L225 Difference]: With dead ends: 288 [2018-11-18 23:38:33,421 INFO L226 Difference]: Without dead ends: 165 [2018-11-18 23:38:33,422 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:33,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2018-11-18 23:38:33,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 149. [2018-11-18 23:38:33,594 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:33,594 INFO L82 GeneralOperation]: Start isEquivalent. First operand 165 states. Second operand 149 states. [2018-11-18 23:38:33,594 INFO L74 IsIncluded]: Start isIncluded. First operand 165 states. Second operand 149 states. [2018-11-18 23:38:33,594 INFO L87 Difference]: Start difference. First operand 165 states. Second operand 149 states. [2018-11-18 23:38:33,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:33,601 INFO L93 Difference]: Finished difference Result 165 states and 241 transitions. [2018-11-18 23:38:33,601 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 241 transitions. [2018-11-18 23:38:33,602 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:33,602 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:33,602 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 165 states. [2018-11-18 23:38:33,602 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 165 states. [2018-11-18 23:38:33,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:33,608 INFO L93 Difference]: Finished difference Result 165 states and 241 transitions. [2018-11-18 23:38:33,608 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 241 transitions. [2018-11-18 23:38:33,609 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:33,609 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:33,609 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:33,609 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:33,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:33,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 221 transitions. [2018-11-18 23:38:33,614 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 221 transitions. Word has length 67 [2018-11-18 23:38:33,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:33,615 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 221 transitions. [2018-11-18 23:38:33,615 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:33,615 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 221 transitions. [2018-11-18 23:38:33,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-18 23:38:33,616 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:33,616 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:33,616 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:33,616 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:33,617 INFO L82 PathProgramCache]: Analyzing trace with hash -57299518, now seen corresponding path program 1 times [2018-11-18 23:38:33,617 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:33,617 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:33,619 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:33,619 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:33,620 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:33,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:33,829 INFO L256 TraceCheckUtils]: 0: Hoare triple {3656#true} call ULTIMATE.init(); {3656#true} is VALID [2018-11-18 23:38:33,830 INFO L273 TraceCheckUtils]: 1: Hoare triple {3656#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {3656#true} is VALID [2018-11-18 23:38:33,830 INFO L273 TraceCheckUtils]: 2: Hoare triple {3656#true} assume true; {3656#true} is VALID [2018-11-18 23:38:33,830 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3656#true} {3656#true} #649#return; {3656#true} is VALID [2018-11-18 23:38:33,830 INFO L256 TraceCheckUtils]: 4: Hoare triple {3656#true} call #t~ret138 := main(); {3656#true} is VALID [2018-11-18 23:38:33,831 INFO L273 TraceCheckUtils]: 5: Hoare triple {3656#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {3656#true} is VALID [2018-11-18 23:38:33,831 INFO L256 TraceCheckUtils]: 6: Hoare triple {3656#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3656#true} is VALID [2018-11-18 23:38:33,833 INFO L273 TraceCheckUtils]: 7: Hoare triple {3656#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,834 INFO L273 TraceCheckUtils]: 8: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,834 INFO L273 TraceCheckUtils]: 9: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,836 INFO L273 TraceCheckUtils]: 10: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,844 INFO L273 TraceCheckUtils]: 11: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,859 INFO L273 TraceCheckUtils]: 12: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,867 INFO L273 TraceCheckUtils]: 13: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,874 INFO L273 TraceCheckUtils]: 14: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,875 INFO L273 TraceCheckUtils]: 15: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,875 INFO L273 TraceCheckUtils]: 16: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,875 INFO L273 TraceCheckUtils]: 17: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,881 INFO L273 TraceCheckUtils]: 18: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,882 INFO L273 TraceCheckUtils]: 19: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,886 INFO L273 TraceCheckUtils]: 20: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:33,886 INFO L273 TraceCheckUtils]: 21: Hoare triple {3658#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3659#(= |ssl3_accept_#t~mem30| 8464)} is VALID [2018-11-18 23:38:33,887 INFO L273 TraceCheckUtils]: 22: Hoare triple {3659#(= |ssl3_accept_#t~mem30| 8464)} assume 8481 == #t~mem30;havoc #t~mem30; {3657#false} is VALID [2018-11-18 23:38:33,887 INFO L273 TraceCheckUtils]: 23: Hoare triple {3657#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {3657#false} is VALID [2018-11-18 23:38:33,887 INFO L273 TraceCheckUtils]: 24: Hoare triple {3657#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,887 INFO L273 TraceCheckUtils]: 25: Hoare triple {3657#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,887 INFO L273 TraceCheckUtils]: 26: Hoare triple {3657#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {3657#false} is VALID [2018-11-18 23:38:33,888 INFO L273 TraceCheckUtils]: 27: Hoare triple {3657#false} ~skip~0 := 0; {3657#false} is VALID [2018-11-18 23:38:33,888 INFO L273 TraceCheckUtils]: 28: Hoare triple {3657#false} assume true; {3657#false} is VALID [2018-11-18 23:38:33,888 INFO L273 TraceCheckUtils]: 29: Hoare triple {3657#false} assume !false; {3657#false} is VALID [2018-11-18 23:38:33,888 INFO L273 TraceCheckUtils]: 30: Hoare triple {3657#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,889 INFO L273 TraceCheckUtils]: 31: Hoare triple {3657#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,889 INFO L273 TraceCheckUtils]: 32: Hoare triple {3657#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,889 INFO L273 TraceCheckUtils]: 33: Hoare triple {3657#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,889 INFO L273 TraceCheckUtils]: 34: Hoare triple {3657#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,889 INFO L273 TraceCheckUtils]: 35: Hoare triple {3657#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,890 INFO L273 TraceCheckUtils]: 36: Hoare triple {3657#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,890 INFO L273 TraceCheckUtils]: 37: Hoare triple {3657#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,890 INFO L273 TraceCheckUtils]: 38: Hoare triple {3657#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,890 INFO L273 TraceCheckUtils]: 39: Hoare triple {3657#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,890 INFO L273 TraceCheckUtils]: 40: Hoare triple {3657#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,890 INFO L273 TraceCheckUtils]: 41: Hoare triple {3657#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 42: Hoare triple {3657#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 43: Hoare triple {3657#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 44: Hoare triple {3657#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 45: Hoare triple {3657#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 46: Hoare triple {3657#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 47: Hoare triple {3657#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,891 INFO L273 TraceCheckUtils]: 48: Hoare triple {3657#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,892 INFO L273 TraceCheckUtils]: 49: Hoare triple {3657#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,892 INFO L273 TraceCheckUtils]: 50: Hoare triple {3657#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,892 INFO L273 TraceCheckUtils]: 51: Hoare triple {3657#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,892 INFO L273 TraceCheckUtils]: 52: Hoare triple {3657#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,892 INFO L273 TraceCheckUtils]: 53: Hoare triple {3657#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,893 INFO L273 TraceCheckUtils]: 54: Hoare triple {3657#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,893 INFO L273 TraceCheckUtils]: 55: Hoare triple {3657#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,893 INFO L273 TraceCheckUtils]: 56: Hoare triple {3657#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,893 INFO L273 TraceCheckUtils]: 57: Hoare triple {3657#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,893 INFO L273 TraceCheckUtils]: 58: Hoare triple {3657#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,894 INFO L273 TraceCheckUtils]: 59: Hoare triple {3657#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,894 INFO L273 TraceCheckUtils]: 60: Hoare triple {3657#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,894 INFO L273 TraceCheckUtils]: 61: Hoare triple {3657#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,894 INFO L273 TraceCheckUtils]: 62: Hoare triple {3657#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {3657#false} is VALID [2018-11-18 23:38:33,895 INFO L273 TraceCheckUtils]: 63: Hoare triple {3657#false} assume 8672 == #t~mem56;havoc #t~mem56; {3657#false} is VALID [2018-11-18 23:38:33,895 INFO L273 TraceCheckUtils]: 64: Hoare triple {3657#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {3657#false} is VALID [2018-11-18 23:38:33,895 INFO L273 TraceCheckUtils]: 65: Hoare triple {3657#false} assume 3 == ~blastFlag~0; {3657#false} is VALID [2018-11-18 23:38:33,895 INFO L273 TraceCheckUtils]: 66: Hoare triple {3657#false} assume !false; {3657#false} is VALID [2018-11-18 23:38:33,903 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:33,903 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:33,904 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:33,904 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:33,905 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:33,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:34,014 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:34,014 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:34,014 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:34,014 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:34,015 INFO L87 Difference]: Start difference. First operand 149 states and 221 transitions. Second operand 4 states. [2018-11-18 23:38:35,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:35,723 INFO L93 Difference]: Finished difference Result 286 states and 426 transitions. [2018-11-18 23:38:35,723 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:35,723 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:35,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:35,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:35,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 426 transitions. [2018-11-18 23:38:35,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:35,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 426 transitions. [2018-11-18 23:38:35,730 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 426 transitions. [2018-11-18 23:38:36,140 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 426 edges. 426 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:36,144 INFO L225 Difference]: With dead ends: 286 [2018-11-18 23:38:36,145 INFO L226 Difference]: Without dead ends: 163 [2018-11-18 23:38:36,145 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:36,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-18 23:38:36,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-18 23:38:36,177 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:36,178 INFO L82 GeneralOperation]: Start isEquivalent. First operand 163 states. Second operand 149 states. [2018-11-18 23:38:36,178 INFO L74 IsIncluded]: Start isIncluded. First operand 163 states. Second operand 149 states. [2018-11-18 23:38:36,178 INFO L87 Difference]: Start difference. First operand 163 states. Second operand 149 states. [2018-11-18 23:38:36,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:36,182 INFO L93 Difference]: Finished difference Result 163 states and 238 transitions. [2018-11-18 23:38:36,182 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 238 transitions. [2018-11-18 23:38:36,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:36,182 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:36,182 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 163 states. [2018-11-18 23:38:36,183 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 163 states. [2018-11-18 23:38:36,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:36,186 INFO L93 Difference]: Finished difference Result 163 states and 238 transitions. [2018-11-18 23:38:36,187 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 238 transitions. [2018-11-18 23:38:36,187 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:36,187 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:36,187 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:36,188 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:36,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:36,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 220 transitions. [2018-11-18 23:38:36,191 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 220 transitions. Word has length 67 [2018-11-18 23:38:36,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:36,191 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 220 transitions. [2018-11-18 23:38:36,191 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:36,191 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 220 transitions. [2018-11-18 23:38:36,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-18 23:38:36,192 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:36,192 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:36,193 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:36,193 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:36,193 INFO L82 PathProgramCache]: Analyzing trace with hash -1716971551, now seen corresponding path program 1 times [2018-11-18 23:38:36,193 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:36,193 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:36,194 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:36,194 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:36,194 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:36,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:36,449 INFO L256 TraceCheckUtils]: 0: Hoare triple {4511#true} call ULTIMATE.init(); {4511#true} is VALID [2018-11-18 23:38:36,450 INFO L273 TraceCheckUtils]: 1: Hoare triple {4511#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {4511#true} is VALID [2018-11-18 23:38:36,450 INFO L273 TraceCheckUtils]: 2: Hoare triple {4511#true} assume true; {4511#true} is VALID [2018-11-18 23:38:36,450 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4511#true} {4511#true} #649#return; {4511#true} is VALID [2018-11-18 23:38:36,451 INFO L256 TraceCheckUtils]: 4: Hoare triple {4511#true} call #t~ret138 := main(); {4511#true} is VALID [2018-11-18 23:38:36,451 INFO L273 TraceCheckUtils]: 5: Hoare triple {4511#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {4511#true} is VALID [2018-11-18 23:38:36,451 INFO L256 TraceCheckUtils]: 6: Hoare triple {4511#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {4511#true} is VALID [2018-11-18 23:38:36,453 INFO L273 TraceCheckUtils]: 7: Hoare triple {4511#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,453 INFO L273 TraceCheckUtils]: 8: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,454 INFO L273 TraceCheckUtils]: 9: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,455 INFO L273 TraceCheckUtils]: 10: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,456 INFO L273 TraceCheckUtils]: 11: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,456 INFO L273 TraceCheckUtils]: 12: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,457 INFO L273 TraceCheckUtils]: 13: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,457 INFO L273 TraceCheckUtils]: 14: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,458 INFO L273 TraceCheckUtils]: 15: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,459 INFO L273 TraceCheckUtils]: 16: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,460 INFO L273 TraceCheckUtils]: 17: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,460 INFO L273 TraceCheckUtils]: 18: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,461 INFO L273 TraceCheckUtils]: 19: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,461 INFO L273 TraceCheckUtils]: 20: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,461 INFO L273 TraceCheckUtils]: 21: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:36,462 INFO L273 TraceCheckUtils]: 22: Hoare triple {4513#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {4514#(= |ssl3_accept_#t~mem31| 8464)} is VALID [2018-11-18 23:38:36,462 INFO L273 TraceCheckUtils]: 23: Hoare triple {4514#(= |ssl3_accept_#t~mem31| 8464)} assume 8482 == #t~mem31;havoc #t~mem31; {4512#false} is VALID [2018-11-18 23:38:36,463 INFO L273 TraceCheckUtils]: 24: Hoare triple {4512#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,463 INFO L273 TraceCheckUtils]: 25: Hoare triple {4512#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,463 INFO L273 TraceCheckUtils]: 26: Hoare triple {4512#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {4512#false} is VALID [2018-11-18 23:38:36,463 INFO L273 TraceCheckUtils]: 27: Hoare triple {4512#false} ~skip~0 := 0; {4512#false} is VALID [2018-11-18 23:38:36,463 INFO L273 TraceCheckUtils]: 28: Hoare triple {4512#false} assume true; {4512#false} is VALID [2018-11-18 23:38:36,463 INFO L273 TraceCheckUtils]: 29: Hoare triple {4512#false} assume !false; {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 30: Hoare triple {4512#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 31: Hoare triple {4512#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 32: Hoare triple {4512#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 33: Hoare triple {4512#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 34: Hoare triple {4512#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 35: Hoare triple {4512#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,464 INFO L273 TraceCheckUtils]: 36: Hoare triple {4512#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,465 INFO L273 TraceCheckUtils]: 37: Hoare triple {4512#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,465 INFO L273 TraceCheckUtils]: 38: Hoare triple {4512#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,465 INFO L273 TraceCheckUtils]: 39: Hoare triple {4512#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,466 INFO L273 TraceCheckUtils]: 40: Hoare triple {4512#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,466 INFO L273 TraceCheckUtils]: 41: Hoare triple {4512#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,466 INFO L273 TraceCheckUtils]: 42: Hoare triple {4512#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,466 INFO L273 TraceCheckUtils]: 43: Hoare triple {4512#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,467 INFO L273 TraceCheckUtils]: 44: Hoare triple {4512#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,467 INFO L273 TraceCheckUtils]: 45: Hoare triple {4512#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,467 INFO L273 TraceCheckUtils]: 46: Hoare triple {4512#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,467 INFO L273 TraceCheckUtils]: 47: Hoare triple {4512#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,467 INFO L273 TraceCheckUtils]: 48: Hoare triple {4512#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,468 INFO L273 TraceCheckUtils]: 49: Hoare triple {4512#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,468 INFO L273 TraceCheckUtils]: 50: Hoare triple {4512#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,468 INFO L273 TraceCheckUtils]: 51: Hoare triple {4512#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,468 INFO L273 TraceCheckUtils]: 52: Hoare triple {4512#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,468 INFO L273 TraceCheckUtils]: 53: Hoare triple {4512#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,469 INFO L273 TraceCheckUtils]: 54: Hoare triple {4512#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,469 INFO L273 TraceCheckUtils]: 55: Hoare triple {4512#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,469 INFO L273 TraceCheckUtils]: 56: Hoare triple {4512#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,469 INFO L273 TraceCheckUtils]: 57: Hoare triple {4512#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,469 INFO L273 TraceCheckUtils]: 58: Hoare triple {4512#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,470 INFO L273 TraceCheckUtils]: 59: Hoare triple {4512#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,470 INFO L273 TraceCheckUtils]: 60: Hoare triple {4512#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,470 INFO L273 TraceCheckUtils]: 61: Hoare triple {4512#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,470 INFO L273 TraceCheckUtils]: 62: Hoare triple {4512#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {4512#false} is VALID [2018-11-18 23:38:36,471 INFO L273 TraceCheckUtils]: 63: Hoare triple {4512#false} assume 8672 == #t~mem56;havoc #t~mem56; {4512#false} is VALID [2018-11-18 23:38:36,471 INFO L273 TraceCheckUtils]: 64: Hoare triple {4512#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {4512#false} is VALID [2018-11-18 23:38:36,471 INFO L273 TraceCheckUtils]: 65: Hoare triple {4512#false} assume 3 == ~blastFlag~0; {4512#false} is VALID [2018-11-18 23:38:36,471 INFO L273 TraceCheckUtils]: 66: Hoare triple {4512#false} assume !false; {4512#false} is VALID [2018-11-18 23:38:36,478 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:36,478 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:36,478 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:36,478 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:36,479 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:36,479 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:36,553 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:36,553 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:36,553 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:36,554 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:36,554 INFO L87 Difference]: Start difference. First operand 149 states and 220 transitions. Second operand 4 states. [2018-11-18 23:38:39,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:39,138 INFO L93 Difference]: Finished difference Result 285 states and 424 transitions. [2018-11-18 23:38:39,138 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:39,139 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-18 23:38:39,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:39,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:39,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 424 transitions. [2018-11-18 23:38:39,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:39,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 424 transitions. [2018-11-18 23:38:39,145 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 424 transitions. [2018-11-18 23:38:39,934 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:39,938 INFO L225 Difference]: With dead ends: 285 [2018-11-18 23:38:39,938 INFO L226 Difference]: Without dead ends: 162 [2018-11-18 23:38:39,939 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:39,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-18 23:38:39,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-18 23:38:39,956 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:39,956 INFO L82 GeneralOperation]: Start isEquivalent. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:39,956 INFO L74 IsIncluded]: Start isIncluded. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:39,956 INFO L87 Difference]: Start difference. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:39,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:39,961 INFO L93 Difference]: Finished difference Result 162 states and 236 transitions. [2018-11-18 23:38:39,961 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 236 transitions. [2018-11-18 23:38:39,962 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:39,962 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:39,962 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 162 states. [2018-11-18 23:38:39,962 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 162 states. [2018-11-18 23:38:39,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:39,966 INFO L93 Difference]: Finished difference Result 162 states and 236 transitions. [2018-11-18 23:38:39,966 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 236 transitions. [2018-11-18 23:38:39,967 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:39,967 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:39,967 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:39,967 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:39,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:39,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 219 transitions. [2018-11-18 23:38:39,971 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 219 transitions. Word has length 67 [2018-11-18 23:38:39,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:39,971 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 219 transitions. [2018-11-18 23:38:39,971 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:39,971 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 219 transitions. [2018-11-18 23:38:39,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-18 23:38:39,972 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:39,972 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:39,973 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:39,973 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:39,973 INFO L82 PathProgramCache]: Analyzing trace with hash 553408758, now seen corresponding path program 1 times [2018-11-18 23:38:39,973 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:39,973 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:39,975 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:39,975 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:39,975 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:39,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:40,649 INFO L256 TraceCheckUtils]: 0: Hoare triple {5362#true} call ULTIMATE.init(); {5362#true} is VALID [2018-11-18 23:38:40,649 INFO L273 TraceCheckUtils]: 1: Hoare triple {5362#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {5362#true} is VALID [2018-11-18 23:38:40,649 INFO L273 TraceCheckUtils]: 2: Hoare triple {5362#true} assume true; {5362#true} is VALID [2018-11-18 23:38:40,650 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5362#true} {5362#true} #649#return; {5362#true} is VALID [2018-11-18 23:38:40,650 INFO L256 TraceCheckUtils]: 4: Hoare triple {5362#true} call #t~ret138 := main(); {5362#true} is VALID [2018-11-18 23:38:40,650 INFO L273 TraceCheckUtils]: 5: Hoare triple {5362#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {5362#true} is VALID [2018-11-18 23:38:40,650 INFO L256 TraceCheckUtils]: 6: Hoare triple {5362#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {5362#true} is VALID [2018-11-18 23:38:40,667 INFO L273 TraceCheckUtils]: 7: Hoare triple {5362#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,667 INFO L273 TraceCheckUtils]: 8: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,668 INFO L273 TraceCheckUtils]: 9: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,669 INFO L273 TraceCheckUtils]: 10: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,674 INFO L273 TraceCheckUtils]: 11: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,674 INFO L273 TraceCheckUtils]: 12: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,676 INFO L273 TraceCheckUtils]: 13: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,676 INFO L273 TraceCheckUtils]: 14: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,676 INFO L273 TraceCheckUtils]: 15: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,677 INFO L273 TraceCheckUtils]: 16: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:40,677 INFO L273 TraceCheckUtils]: 17: Hoare triple {5364#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5365#(= |ssl3_accept_#t~mem26| 8464)} is VALID [2018-11-18 23:38:40,678 INFO L273 TraceCheckUtils]: 18: Hoare triple {5365#(= |ssl3_accept_#t~mem26| 8464)} assume 8192 == #t~mem26;havoc #t~mem26; {5363#false} is VALID [2018-11-18 23:38:40,678 INFO L273 TraceCheckUtils]: 19: Hoare triple {5363#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,678 INFO L273 TraceCheckUtils]: 20: Hoare triple {5363#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {5363#false} is VALID [2018-11-18 23:38:40,678 INFO L273 TraceCheckUtils]: 21: Hoare triple {5363#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,679 INFO L273 TraceCheckUtils]: 22: Hoare triple {5363#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,679 INFO L273 TraceCheckUtils]: 23: Hoare triple {5363#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {5363#false} is VALID [2018-11-18 23:38:40,679 INFO L273 TraceCheckUtils]: 24: Hoare triple {5363#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,679 INFO L273 TraceCheckUtils]: 25: Hoare triple {5363#false} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,680 INFO L273 TraceCheckUtils]: 26: Hoare triple {5363#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,680 INFO L273 TraceCheckUtils]: 27: Hoare triple {5363#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {5363#false} is VALID [2018-11-18 23:38:40,680 INFO L273 TraceCheckUtils]: 28: Hoare triple {5363#false} ~skip~0 := 0; {5363#false} is VALID [2018-11-18 23:38:40,680 INFO L273 TraceCheckUtils]: 29: Hoare triple {5363#false} assume true; {5363#false} is VALID [2018-11-18 23:38:40,681 INFO L273 TraceCheckUtils]: 30: Hoare triple {5363#false} assume !false; {5363#false} is VALID [2018-11-18 23:38:40,681 INFO L273 TraceCheckUtils]: 31: Hoare triple {5363#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,681 INFO L273 TraceCheckUtils]: 32: Hoare triple {5363#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,681 INFO L273 TraceCheckUtils]: 33: Hoare triple {5363#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,681 INFO L273 TraceCheckUtils]: 34: Hoare triple {5363#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,682 INFO L273 TraceCheckUtils]: 35: Hoare triple {5363#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,682 INFO L273 TraceCheckUtils]: 36: Hoare triple {5363#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,682 INFO L273 TraceCheckUtils]: 37: Hoare triple {5363#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,682 INFO L273 TraceCheckUtils]: 38: Hoare triple {5363#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 39: Hoare triple {5363#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 40: Hoare triple {5363#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 41: Hoare triple {5363#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 42: Hoare triple {5363#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 43: Hoare triple {5363#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 44: Hoare triple {5363#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,683 INFO L273 TraceCheckUtils]: 45: Hoare triple {5363#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,684 INFO L273 TraceCheckUtils]: 46: Hoare triple {5363#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,684 INFO L273 TraceCheckUtils]: 47: Hoare triple {5363#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,684 INFO L273 TraceCheckUtils]: 48: Hoare triple {5363#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,684 INFO L273 TraceCheckUtils]: 49: Hoare triple {5363#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,684 INFO L273 TraceCheckUtils]: 50: Hoare triple {5363#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,684 INFO L273 TraceCheckUtils]: 51: Hoare triple {5363#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 52: Hoare triple {5363#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 53: Hoare triple {5363#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 54: Hoare triple {5363#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 55: Hoare triple {5363#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 56: Hoare triple {5363#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 57: Hoare triple {5363#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,685 INFO L273 TraceCheckUtils]: 58: Hoare triple {5363#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,686 INFO L273 TraceCheckUtils]: 59: Hoare triple {5363#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,686 INFO L273 TraceCheckUtils]: 60: Hoare triple {5363#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,686 INFO L273 TraceCheckUtils]: 61: Hoare triple {5363#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,686 INFO L273 TraceCheckUtils]: 62: Hoare triple {5363#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,686 INFO L273 TraceCheckUtils]: 63: Hoare triple {5363#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {5363#false} is VALID [2018-11-18 23:38:40,686 INFO L273 TraceCheckUtils]: 64: Hoare triple {5363#false} assume 8672 == #t~mem56;havoc #t~mem56; {5363#false} is VALID [2018-11-18 23:38:40,687 INFO L273 TraceCheckUtils]: 65: Hoare triple {5363#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {5363#false} is VALID [2018-11-18 23:38:40,687 INFO L273 TraceCheckUtils]: 66: Hoare triple {5363#false} assume 3 == ~blastFlag~0; {5363#false} is VALID [2018-11-18 23:38:40,687 INFO L273 TraceCheckUtils]: 67: Hoare triple {5363#false} assume !false; {5363#false} is VALID [2018-11-18 23:38:40,691 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:40,691 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:40,691 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:40,692 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-18 23:38:40,692 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:40,692 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:40,759 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:40,759 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:40,760 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:40,760 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:40,760 INFO L87 Difference]: Start difference. First operand 149 states and 219 transitions. Second operand 4 states. [2018-11-18 23:38:43,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:43,080 INFO L93 Difference]: Finished difference Result 285 states and 423 transitions. [2018-11-18 23:38:43,080 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:43,080 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-18 23:38:43,080 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:43,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:43,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 423 transitions. [2018-11-18 23:38:43,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:43,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 423 transitions. [2018-11-18 23:38:43,086 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 423 transitions. [2018-11-18 23:38:43,815 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 423 edges. 423 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:43,819 INFO L225 Difference]: With dead ends: 285 [2018-11-18 23:38:43,819 INFO L226 Difference]: Without dead ends: 162 [2018-11-18 23:38:43,819 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:43,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-18 23:38:43,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-18 23:38:43,844 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:43,844 INFO L82 GeneralOperation]: Start isEquivalent. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:43,844 INFO L74 IsIncluded]: Start isIncluded. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:43,844 INFO L87 Difference]: Start difference. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:43,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:43,848 INFO L93 Difference]: Finished difference Result 162 states and 235 transitions. [2018-11-18 23:38:43,849 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 235 transitions. [2018-11-18 23:38:43,849 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:43,849 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:43,850 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 162 states. [2018-11-18 23:38:43,850 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 162 states. [2018-11-18 23:38:43,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:43,853 INFO L93 Difference]: Finished difference Result 162 states and 235 transitions. [2018-11-18 23:38:43,854 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 235 transitions. [2018-11-18 23:38:43,854 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:43,854 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:43,854 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:43,855 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:43,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:43,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 218 transitions. [2018-11-18 23:38:43,858 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 218 transitions. Word has length 68 [2018-11-18 23:38:43,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:43,858 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 218 transitions. [2018-11-18 23:38:43,858 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:43,859 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 218 transitions. [2018-11-18 23:38:43,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-18 23:38:43,860 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:43,860 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:43,860 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:43,860 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:43,860 INFO L82 PathProgramCache]: Analyzing trace with hash 2039637716, now seen corresponding path program 1 times [2018-11-18 23:38:43,860 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:43,861 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:43,862 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:43,862 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:43,862 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:43,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:44,427 INFO L256 TraceCheckUtils]: 0: Hoare triple {6213#true} call ULTIMATE.init(); {6213#true} is VALID [2018-11-18 23:38:44,427 INFO L273 TraceCheckUtils]: 1: Hoare triple {6213#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {6213#true} is VALID [2018-11-18 23:38:44,428 INFO L273 TraceCheckUtils]: 2: Hoare triple {6213#true} assume true; {6213#true} is VALID [2018-11-18 23:38:44,428 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6213#true} {6213#true} #649#return; {6213#true} is VALID [2018-11-18 23:38:44,428 INFO L256 TraceCheckUtils]: 4: Hoare triple {6213#true} call #t~ret138 := main(); {6213#true} is VALID [2018-11-18 23:38:44,428 INFO L273 TraceCheckUtils]: 5: Hoare triple {6213#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {6213#true} is VALID [2018-11-18 23:38:44,428 INFO L256 TraceCheckUtils]: 6: Hoare triple {6213#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6213#true} is VALID [2018-11-18 23:38:44,430 INFO L273 TraceCheckUtils]: 7: Hoare triple {6213#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,430 INFO L273 TraceCheckUtils]: 8: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,433 INFO L273 TraceCheckUtils]: 9: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,433 INFO L273 TraceCheckUtils]: 10: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,435 INFO L273 TraceCheckUtils]: 11: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,435 INFO L273 TraceCheckUtils]: 12: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,437 INFO L273 TraceCheckUtils]: 13: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,437 INFO L273 TraceCheckUtils]: 14: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,439 INFO L273 TraceCheckUtils]: 15: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,439 INFO L273 TraceCheckUtils]: 16: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,442 INFO L273 TraceCheckUtils]: 17: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:44,442 INFO L273 TraceCheckUtils]: 18: Hoare triple {6215#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6216#(= |ssl3_accept_#t~mem27| 8464)} is VALID [2018-11-18 23:38:44,444 INFO L273 TraceCheckUtils]: 19: Hoare triple {6216#(= |ssl3_accept_#t~mem27| 8464)} assume 24576 == #t~mem27;havoc #t~mem27; {6214#false} is VALID [2018-11-18 23:38:44,444 INFO L273 TraceCheckUtils]: 20: Hoare triple {6214#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,444 INFO L273 TraceCheckUtils]: 21: Hoare triple {6214#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {6214#false} is VALID [2018-11-18 23:38:44,444 INFO L273 TraceCheckUtils]: 22: Hoare triple {6214#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,444 INFO L273 TraceCheckUtils]: 23: Hoare triple {6214#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,444 INFO L273 TraceCheckUtils]: 24: Hoare triple {6214#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 25: Hoare triple {6214#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 26: Hoare triple {6214#false} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 27: Hoare triple {6214#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 28: Hoare triple {6214#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 29: Hoare triple {6214#false} ~skip~0 := 0; {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 30: Hoare triple {6214#false} assume true; {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 31: Hoare triple {6214#false} assume !false; {6214#false} is VALID [2018-11-18 23:38:44,445 INFO L273 TraceCheckUtils]: 32: Hoare triple {6214#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 33: Hoare triple {6214#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 34: Hoare triple {6214#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 35: Hoare triple {6214#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 36: Hoare triple {6214#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 37: Hoare triple {6214#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 38: Hoare triple {6214#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,446 INFO L273 TraceCheckUtils]: 39: Hoare triple {6214#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 40: Hoare triple {6214#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 41: Hoare triple {6214#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 42: Hoare triple {6214#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 43: Hoare triple {6214#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 44: Hoare triple {6214#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 45: Hoare triple {6214#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,447 INFO L273 TraceCheckUtils]: 46: Hoare triple {6214#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 47: Hoare triple {6214#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 48: Hoare triple {6214#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 49: Hoare triple {6214#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 50: Hoare triple {6214#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 51: Hoare triple {6214#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 52: Hoare triple {6214#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 53: Hoare triple {6214#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,448 INFO L273 TraceCheckUtils]: 54: Hoare triple {6214#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,449 INFO L273 TraceCheckUtils]: 55: Hoare triple {6214#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,449 INFO L273 TraceCheckUtils]: 56: Hoare triple {6214#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,449 INFO L273 TraceCheckUtils]: 57: Hoare triple {6214#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,450 INFO L273 TraceCheckUtils]: 58: Hoare triple {6214#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,450 INFO L273 TraceCheckUtils]: 59: Hoare triple {6214#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,450 INFO L273 TraceCheckUtils]: 60: Hoare triple {6214#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,450 INFO L273 TraceCheckUtils]: 61: Hoare triple {6214#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,450 INFO L273 TraceCheckUtils]: 62: Hoare triple {6214#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,451 INFO L273 TraceCheckUtils]: 63: Hoare triple {6214#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,451 INFO L273 TraceCheckUtils]: 64: Hoare triple {6214#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {6214#false} is VALID [2018-11-18 23:38:44,451 INFO L273 TraceCheckUtils]: 65: Hoare triple {6214#false} assume 8672 == #t~mem56;havoc #t~mem56; {6214#false} is VALID [2018-11-18 23:38:44,451 INFO L273 TraceCheckUtils]: 66: Hoare triple {6214#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {6214#false} is VALID [2018-11-18 23:38:44,451 INFO L273 TraceCheckUtils]: 67: Hoare triple {6214#false} assume 3 == ~blastFlag~0; {6214#false} is VALID [2018-11-18 23:38:44,452 INFO L273 TraceCheckUtils]: 68: Hoare triple {6214#false} assume !false; {6214#false} is VALID [2018-11-18 23:38:44,458 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:44,458 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:44,458 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:44,458 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-18 23:38:44,459 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:44,459 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:44,546 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 69 edges. 69 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:44,546 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:44,546 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:44,546 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:44,546 INFO L87 Difference]: Start difference. First operand 149 states and 218 transitions. Second operand 4 states. [2018-11-18 23:38:47,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:47,857 INFO L93 Difference]: Finished difference Result 285 states and 422 transitions. [2018-11-18 23:38:47,857 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:47,857 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-18 23:38:47,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:47,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:47,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 422 transitions. [2018-11-18 23:38:47,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:47,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 422 transitions. [2018-11-18 23:38:47,865 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 422 transitions. [2018-11-18 23:38:48,400 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 422 edges. 422 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:48,404 INFO L225 Difference]: With dead ends: 285 [2018-11-18 23:38:48,404 INFO L226 Difference]: Without dead ends: 162 [2018-11-18 23:38:48,405 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:48,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-18 23:38:48,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-18 23:38:48,535 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:48,535 INFO L82 GeneralOperation]: Start isEquivalent. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:48,536 INFO L74 IsIncluded]: Start isIncluded. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:48,536 INFO L87 Difference]: Start difference. First operand 162 states. Second operand 149 states. [2018-11-18 23:38:48,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:48,543 INFO L93 Difference]: Finished difference Result 162 states and 234 transitions. [2018-11-18 23:38:48,543 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 234 transitions. [2018-11-18 23:38:48,544 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:48,544 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:48,544 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 162 states. [2018-11-18 23:38:48,544 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 162 states. [2018-11-18 23:38:48,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:48,548 INFO L93 Difference]: Finished difference Result 162 states and 234 transitions. [2018-11-18 23:38:48,548 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 234 transitions. [2018-11-18 23:38:48,549 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:48,549 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:48,549 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:48,549 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:48,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:48,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 217 transitions. [2018-11-18 23:38:48,555 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 217 transitions. Word has length 69 [2018-11-18 23:38:48,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:48,555 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 217 transitions. [2018-11-18 23:38:48,555 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:48,555 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 217 transitions. [2018-11-18 23:38:48,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-18 23:38:48,556 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:48,557 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:48,557 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:48,557 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:48,557 INFO L82 PathProgramCache]: Analyzing trace with hash -334605487, now seen corresponding path program 1 times [2018-11-18 23:38:48,557 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:48,558 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:48,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:48,559 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:48,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:48,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:48,782 INFO L256 TraceCheckUtils]: 0: Hoare triple {7064#true} call ULTIMATE.init(); {7064#true} is VALID [2018-11-18 23:38:48,782 INFO L273 TraceCheckUtils]: 1: Hoare triple {7064#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {7064#true} is VALID [2018-11-18 23:38:48,783 INFO L273 TraceCheckUtils]: 2: Hoare triple {7064#true} assume true; {7064#true} is VALID [2018-11-18 23:38:48,783 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7064#true} {7064#true} #649#return; {7064#true} is VALID [2018-11-18 23:38:48,783 INFO L256 TraceCheckUtils]: 4: Hoare triple {7064#true} call #t~ret138 := main(); {7064#true} is VALID [2018-11-18 23:38:48,783 INFO L273 TraceCheckUtils]: 5: Hoare triple {7064#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {7064#true} is VALID [2018-11-18 23:38:48,783 INFO L256 TraceCheckUtils]: 6: Hoare triple {7064#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7064#true} is VALID [2018-11-18 23:38:48,785 INFO L273 TraceCheckUtils]: 7: Hoare triple {7064#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,786 INFO L273 TraceCheckUtils]: 8: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,786 INFO L273 TraceCheckUtils]: 9: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,787 INFO L273 TraceCheckUtils]: 10: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,787 INFO L273 TraceCheckUtils]: 11: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,788 INFO L273 TraceCheckUtils]: 12: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,789 INFO L273 TraceCheckUtils]: 13: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume true; {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,790 INFO L273 TraceCheckUtils]: 14: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,790 INFO L273 TraceCheckUtils]: 15: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,791 INFO L273 TraceCheckUtils]: 16: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,792 INFO L273 TraceCheckUtils]: 17: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,792 INFO L273 TraceCheckUtils]: 18: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-18 23:38:48,793 INFO L273 TraceCheckUtils]: 19: Hoare triple {7066#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7067#(= |ssl3_accept_#t~mem28| 8464)} is VALID [2018-11-18 23:38:48,794 INFO L273 TraceCheckUtils]: 20: Hoare triple {7067#(= |ssl3_accept_#t~mem28| 8464)} assume 8195 == #t~mem28;havoc #t~mem28; {7065#false} is VALID [2018-11-18 23:38:48,794 INFO L273 TraceCheckUtils]: 21: Hoare triple {7065#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,795 INFO L273 TraceCheckUtils]: 22: Hoare triple {7065#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {7065#false} is VALID [2018-11-18 23:38:48,795 INFO L273 TraceCheckUtils]: 23: Hoare triple {7065#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,795 INFO L273 TraceCheckUtils]: 24: Hoare triple {7065#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,795 INFO L273 TraceCheckUtils]: 25: Hoare triple {7065#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {7065#false} is VALID [2018-11-18 23:38:48,796 INFO L273 TraceCheckUtils]: 26: Hoare triple {7065#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,796 INFO L273 TraceCheckUtils]: 27: Hoare triple {7065#false} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,796 INFO L273 TraceCheckUtils]: 28: Hoare triple {7065#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,797 INFO L273 TraceCheckUtils]: 29: Hoare triple {7065#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7065#false} is VALID [2018-11-18 23:38:48,797 INFO L273 TraceCheckUtils]: 30: Hoare triple {7065#false} ~skip~0 := 0; {7065#false} is VALID [2018-11-18 23:38:48,797 INFO L273 TraceCheckUtils]: 31: Hoare triple {7065#false} assume true; {7065#false} is VALID [2018-11-18 23:38:48,797 INFO L273 TraceCheckUtils]: 32: Hoare triple {7065#false} assume !false; {7065#false} is VALID [2018-11-18 23:38:48,798 INFO L273 TraceCheckUtils]: 33: Hoare triple {7065#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,798 INFO L273 TraceCheckUtils]: 34: Hoare triple {7065#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,798 INFO L273 TraceCheckUtils]: 35: Hoare triple {7065#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,798 INFO L273 TraceCheckUtils]: 36: Hoare triple {7065#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,799 INFO L273 TraceCheckUtils]: 37: Hoare triple {7065#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,799 INFO L273 TraceCheckUtils]: 38: Hoare triple {7065#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,799 INFO L273 TraceCheckUtils]: 39: Hoare triple {7065#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,799 INFO L273 TraceCheckUtils]: 40: Hoare triple {7065#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,799 INFO L273 TraceCheckUtils]: 41: Hoare triple {7065#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,800 INFO L273 TraceCheckUtils]: 42: Hoare triple {7065#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,800 INFO L273 TraceCheckUtils]: 43: Hoare triple {7065#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,800 INFO L273 TraceCheckUtils]: 44: Hoare triple {7065#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,800 INFO L273 TraceCheckUtils]: 45: Hoare triple {7065#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,800 INFO L273 TraceCheckUtils]: 46: Hoare triple {7065#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,800 INFO L273 TraceCheckUtils]: 47: Hoare triple {7065#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,801 INFO L273 TraceCheckUtils]: 48: Hoare triple {7065#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,801 INFO L273 TraceCheckUtils]: 49: Hoare triple {7065#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,801 INFO L273 TraceCheckUtils]: 50: Hoare triple {7065#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,801 INFO L273 TraceCheckUtils]: 51: Hoare triple {7065#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,801 INFO L273 TraceCheckUtils]: 52: Hoare triple {7065#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,801 INFO L273 TraceCheckUtils]: 53: Hoare triple {7065#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,802 INFO L273 TraceCheckUtils]: 54: Hoare triple {7065#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,802 INFO L273 TraceCheckUtils]: 55: Hoare triple {7065#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,802 INFO L273 TraceCheckUtils]: 56: Hoare triple {7065#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,802 INFO L273 TraceCheckUtils]: 57: Hoare triple {7065#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,802 INFO L273 TraceCheckUtils]: 58: Hoare triple {7065#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,802 INFO L273 TraceCheckUtils]: 59: Hoare triple {7065#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,803 INFO L273 TraceCheckUtils]: 60: Hoare triple {7065#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,803 INFO L273 TraceCheckUtils]: 61: Hoare triple {7065#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,803 INFO L273 TraceCheckUtils]: 62: Hoare triple {7065#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,803 INFO L273 TraceCheckUtils]: 63: Hoare triple {7065#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,803 INFO L273 TraceCheckUtils]: 64: Hoare triple {7065#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,803 INFO L273 TraceCheckUtils]: 65: Hoare triple {7065#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {7065#false} is VALID [2018-11-18 23:38:48,804 INFO L273 TraceCheckUtils]: 66: Hoare triple {7065#false} assume 8672 == #t~mem56;havoc #t~mem56; {7065#false} is VALID [2018-11-18 23:38:48,804 INFO L273 TraceCheckUtils]: 67: Hoare triple {7065#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {7065#false} is VALID [2018-11-18 23:38:48,804 INFO L273 TraceCheckUtils]: 68: Hoare triple {7065#false} assume 3 == ~blastFlag~0; {7065#false} is VALID [2018-11-18 23:38:48,804 INFO L273 TraceCheckUtils]: 69: Hoare triple {7065#false} assume !false; {7065#false} is VALID [2018-11-18 23:38:48,812 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:48,812 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:48,813 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:48,813 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 70 [2018-11-18 23:38:48,813 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:48,813 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:48,924 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:48,925 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:48,925 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:48,925 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:48,925 INFO L87 Difference]: Start difference. First operand 149 states and 217 transitions. Second operand 4 states. [2018-11-18 23:38:51,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:51,925 INFO L93 Difference]: Finished difference Result 275 states and 408 transitions. [2018-11-18 23:38:51,925 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:51,925 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 70 [2018-11-18 23:38:51,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:51,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:51,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 408 transitions. [2018-11-18 23:38:51,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:51,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 408 transitions. [2018-11-18 23:38:51,932 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 408 transitions. [2018-11-18 23:38:52,380 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 408 edges. 408 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:52,384 INFO L225 Difference]: With dead ends: 275 [2018-11-18 23:38:52,385 INFO L226 Difference]: Without dead ends: 152 [2018-11-18 23:38:52,385 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:52,386 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2018-11-18 23:38:52,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 149. [2018-11-18 23:38:52,400 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:52,400 INFO L82 GeneralOperation]: Start isEquivalent. First operand 152 states. Second operand 149 states. [2018-11-18 23:38:52,401 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 149 states. [2018-11-18 23:38:52,401 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 149 states. [2018-11-18 23:38:52,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:52,405 INFO L93 Difference]: Finished difference Result 152 states and 220 transitions. [2018-11-18 23:38:52,405 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 220 transitions. [2018-11-18 23:38:52,406 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:52,406 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:52,406 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 152 states. [2018-11-18 23:38:52,406 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 152 states. [2018-11-18 23:38:52,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:52,409 INFO L93 Difference]: Finished difference Result 152 states and 220 transitions. [2018-11-18 23:38:52,410 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 220 transitions. [2018-11-18 23:38:52,410 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:52,410 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:52,410 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:52,410 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:52,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-18 23:38:52,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 216 transitions. [2018-11-18 23:38:52,413 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 216 transitions. Word has length 70 [2018-11-18 23:38:52,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:52,414 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 216 transitions. [2018-11-18 23:38:52,414 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:52,414 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 216 transitions. [2018-11-18 23:38:52,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-18 23:38:52,415 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:52,415 INFO L375 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:52,415 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:52,415 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:52,415 INFO L82 PathProgramCache]: Analyzing trace with hash -1998161272, now seen corresponding path program 1 times [2018-11-18 23:38:52,416 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:52,416 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:52,417 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:52,417 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:52,417 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:52,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:52,609 INFO L256 TraceCheckUtils]: 0: Hoare triple {7884#true} call ULTIMATE.init(); {7884#true} is VALID [2018-11-18 23:38:52,610 INFO L273 TraceCheckUtils]: 1: Hoare triple {7884#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,610 INFO L273 TraceCheckUtils]: 2: Hoare triple {7884#true} assume true; {7884#true} is VALID [2018-11-18 23:38:52,610 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7884#true} {7884#true} #649#return; {7884#true} is VALID [2018-11-18 23:38:52,610 INFO L256 TraceCheckUtils]: 4: Hoare triple {7884#true} call #t~ret138 := main(); {7884#true} is VALID [2018-11-18 23:38:52,611 INFO L273 TraceCheckUtils]: 5: Hoare triple {7884#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,611 INFO L256 TraceCheckUtils]: 6: Hoare triple {7884#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7884#true} is VALID [2018-11-18 23:38:52,611 INFO L273 TraceCheckUtils]: 7: Hoare triple {7884#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,611 INFO L273 TraceCheckUtils]: 8: Hoare triple {7884#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {7884#true} is VALID [2018-11-18 23:38:52,611 INFO L273 TraceCheckUtils]: 9: Hoare triple {7884#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 10: Hoare triple {7884#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 11: Hoare triple {7884#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 12: Hoare triple {7884#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 13: Hoare triple {7884#true} assume true; {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 14: Hoare triple {7884#true} assume !false; {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 15: Hoare triple {7884#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,612 INFO L273 TraceCheckUtils]: 16: Hoare triple {7884#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,613 INFO L273 TraceCheckUtils]: 17: Hoare triple {7884#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,613 INFO L273 TraceCheckUtils]: 18: Hoare triple {7884#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,613 INFO L273 TraceCheckUtils]: 19: Hoare triple {7884#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,613 INFO L273 TraceCheckUtils]: 20: Hoare triple {7884#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,613 INFO L273 TraceCheckUtils]: 21: Hoare triple {7884#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,614 INFO L273 TraceCheckUtils]: 22: Hoare triple {7884#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,614 INFO L273 TraceCheckUtils]: 23: Hoare triple {7884#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7884#true} is VALID [2018-11-18 23:38:52,614 INFO L273 TraceCheckUtils]: 24: Hoare triple {7884#true} assume 8464 == #t~mem32;havoc #t~mem32; {7884#true} is VALID [2018-11-18 23:38:52,614 INFO L273 TraceCheckUtils]: 25: Hoare triple {7884#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {7884#true} is VALID [2018-11-18 23:38:52,614 INFO L273 TraceCheckUtils]: 26: Hoare triple {7884#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {7884#true} is VALID [2018-11-18 23:38:52,620 INFO L273 TraceCheckUtils]: 27: Hoare triple {7884#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,620 INFO L273 TraceCheckUtils]: 28: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,622 INFO L273 TraceCheckUtils]: 29: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,622 INFO L273 TraceCheckUtils]: 30: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,624 INFO L273 TraceCheckUtils]: 31: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume true; {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,624 INFO L273 TraceCheckUtils]: 32: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,624 INFO L273 TraceCheckUtils]: 33: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,625 INFO L273 TraceCheckUtils]: 34: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,625 INFO L273 TraceCheckUtils]: 35: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,644 INFO L273 TraceCheckUtils]: 36: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,653 INFO L273 TraceCheckUtils]: 37: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,666 INFO L273 TraceCheckUtils]: 38: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,675 INFO L273 TraceCheckUtils]: 39: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,675 INFO L273 TraceCheckUtils]: 40: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,677 INFO L273 TraceCheckUtils]: 41: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,677 INFO L273 TraceCheckUtils]: 42: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,679 INFO L273 TraceCheckUtils]: 43: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:52,679 INFO L273 TraceCheckUtils]: 44: Hoare triple {7886#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7887#(= 8496 |ssl3_accept_#t~mem35|)} is VALID [2018-11-18 23:38:52,681 INFO L273 TraceCheckUtils]: 45: Hoare triple {7887#(= 8496 |ssl3_accept_#t~mem35|)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,681 INFO L273 TraceCheckUtils]: 46: Hoare triple {7885#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,681 INFO L273 TraceCheckUtils]: 47: Hoare triple {7885#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,681 INFO L273 TraceCheckUtils]: 48: Hoare triple {7885#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,681 INFO L273 TraceCheckUtils]: 49: Hoare triple {7885#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,681 INFO L273 TraceCheckUtils]: 50: Hoare triple {7885#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,682 INFO L273 TraceCheckUtils]: 51: Hoare triple {7885#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,682 INFO L273 TraceCheckUtils]: 52: Hoare triple {7885#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,682 INFO L273 TraceCheckUtils]: 53: Hoare triple {7885#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,682 INFO L273 TraceCheckUtils]: 54: Hoare triple {7885#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,682 INFO L273 TraceCheckUtils]: 55: Hoare triple {7885#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,683 INFO L273 TraceCheckUtils]: 56: Hoare triple {7885#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,683 INFO L273 TraceCheckUtils]: 57: Hoare triple {7885#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,683 INFO L273 TraceCheckUtils]: 58: Hoare triple {7885#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,683 INFO L273 TraceCheckUtils]: 59: Hoare triple {7885#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,683 INFO L273 TraceCheckUtils]: 60: Hoare triple {7885#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,684 INFO L273 TraceCheckUtils]: 61: Hoare triple {7885#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,684 INFO L273 TraceCheckUtils]: 62: Hoare triple {7885#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,684 INFO L273 TraceCheckUtils]: 63: Hoare triple {7885#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,684 INFO L273 TraceCheckUtils]: 64: Hoare triple {7885#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,684 INFO L273 TraceCheckUtils]: 65: Hoare triple {7885#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {7885#false} is VALID [2018-11-18 23:38:52,685 INFO L273 TraceCheckUtils]: 66: Hoare triple {7885#false} assume 8672 == #t~mem56;havoc #t~mem56; {7885#false} is VALID [2018-11-18 23:38:52,685 INFO L273 TraceCheckUtils]: 67: Hoare triple {7885#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {7885#false} is VALID [2018-11-18 23:38:52,685 INFO L273 TraceCheckUtils]: 68: Hoare triple {7885#false} assume 3 == ~blastFlag~0; {7885#false} is VALID [2018-11-18 23:38:52,685 INFO L273 TraceCheckUtils]: 69: Hoare triple {7885#false} assume !false; {7885#false} is VALID [2018-11-18 23:38:52,690 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:52,691 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:52,691 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:52,691 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 70 [2018-11-18 23:38:52,691 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:52,692 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:52,769 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:52,770 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:52,770 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:52,770 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:52,770 INFO L87 Difference]: Start difference. First operand 149 states and 216 transitions. Second operand 4 states. [2018-11-18 23:38:54,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:54,620 INFO L93 Difference]: Finished difference Result 316 states and 470 transitions. [2018-11-18 23:38:54,621 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:54,621 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 70 [2018-11-18 23:38:54,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:54,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:54,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 458 transitions. [2018-11-18 23:38:54,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:54,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 458 transitions. [2018-11-18 23:38:54,627 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 458 transitions. [2018-11-18 23:38:55,117 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 458 edges. 458 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:55,121 INFO L225 Difference]: With dead ends: 316 [2018-11-18 23:38:55,122 INFO L226 Difference]: Without dead ends: 193 [2018-11-18 23:38:55,122 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:55,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2018-11-18 23:38:55,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 172. [2018-11-18 23:38:55,173 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:55,173 INFO L82 GeneralOperation]: Start isEquivalent. First operand 193 states. Second operand 172 states. [2018-11-18 23:38:55,173 INFO L74 IsIncluded]: Start isIncluded. First operand 193 states. Second operand 172 states. [2018-11-18 23:38:55,173 INFO L87 Difference]: Start difference. First operand 193 states. Second operand 172 states. [2018-11-18 23:38:55,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:55,178 INFO L93 Difference]: Finished difference Result 193 states and 282 transitions. [2018-11-18 23:38:55,178 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 282 transitions. [2018-11-18 23:38:55,178 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:55,179 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:55,179 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 193 states. [2018-11-18 23:38:55,179 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 193 states. [2018-11-18 23:38:55,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:55,183 INFO L93 Difference]: Finished difference Result 193 states and 282 transitions. [2018-11-18 23:38:55,183 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 282 transitions. [2018-11-18 23:38:55,184 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:55,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:55,184 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:55,184 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:55,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-18 23:38:55,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 255 transitions. [2018-11-18 23:38:55,188 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 255 transitions. Word has length 70 [2018-11-18 23:38:55,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:55,188 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 255 transitions. [2018-11-18 23:38:55,188 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:55,188 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 255 transitions. [2018-11-18 23:38:55,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-18 23:38:55,189 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:55,189 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:55,190 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:55,190 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:55,190 INFO L82 PathProgramCache]: Analyzing trace with hash 1569535957, now seen corresponding path program 1 times [2018-11-18 23:38:55,190 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:55,190 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:55,191 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:55,192 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:55,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:55,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:55,509 INFO L256 TraceCheckUtils]: 0: Hoare triple {8859#true} call ULTIMATE.init(); {8859#true} is VALID [2018-11-18 23:38:55,510 INFO L273 TraceCheckUtils]: 1: Hoare triple {8859#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,510 INFO L273 TraceCheckUtils]: 2: Hoare triple {8859#true} assume true; {8859#true} is VALID [2018-11-18 23:38:55,510 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8859#true} {8859#true} #649#return; {8859#true} is VALID [2018-11-18 23:38:55,511 INFO L256 TraceCheckUtils]: 4: Hoare triple {8859#true} call #t~ret138 := main(); {8859#true} is VALID [2018-11-18 23:38:55,511 INFO L273 TraceCheckUtils]: 5: Hoare triple {8859#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,511 INFO L256 TraceCheckUtils]: 6: Hoare triple {8859#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {8859#true} is VALID [2018-11-18 23:38:55,512 INFO L273 TraceCheckUtils]: 7: Hoare triple {8859#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,512 INFO L273 TraceCheckUtils]: 8: Hoare triple {8859#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {8859#true} is VALID [2018-11-18 23:38:55,512 INFO L273 TraceCheckUtils]: 9: Hoare triple {8859#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {8859#true} is VALID [2018-11-18 23:38:55,512 INFO L273 TraceCheckUtils]: 10: Hoare triple {8859#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {8859#true} is VALID [2018-11-18 23:38:55,512 INFO L273 TraceCheckUtils]: 11: Hoare triple {8859#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,513 INFO L273 TraceCheckUtils]: 12: Hoare triple {8859#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {8859#true} is VALID [2018-11-18 23:38:55,513 INFO L273 TraceCheckUtils]: 13: Hoare triple {8859#true} assume true; {8859#true} is VALID [2018-11-18 23:38:55,513 INFO L273 TraceCheckUtils]: 14: Hoare triple {8859#true} assume !false; {8859#true} is VALID [2018-11-18 23:38:55,513 INFO L273 TraceCheckUtils]: 15: Hoare triple {8859#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,513 INFO L273 TraceCheckUtils]: 16: Hoare triple {8859#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,513 INFO L273 TraceCheckUtils]: 17: Hoare triple {8859#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,514 INFO L273 TraceCheckUtils]: 18: Hoare triple {8859#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,514 INFO L273 TraceCheckUtils]: 19: Hoare triple {8859#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,514 INFO L273 TraceCheckUtils]: 20: Hoare triple {8859#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,514 INFO L273 TraceCheckUtils]: 21: Hoare triple {8859#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,514 INFO L273 TraceCheckUtils]: 22: Hoare triple {8859#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,514 INFO L273 TraceCheckUtils]: 23: Hoare triple {8859#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {8859#true} is VALID [2018-11-18 23:38:55,515 INFO L273 TraceCheckUtils]: 24: Hoare triple {8859#true} assume 8464 == #t~mem32;havoc #t~mem32; {8859#true} is VALID [2018-11-18 23:38:55,515 INFO L273 TraceCheckUtils]: 25: Hoare triple {8859#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {8859#true} is VALID [2018-11-18 23:38:55,515 INFO L273 TraceCheckUtils]: 26: Hoare triple {8859#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {8859#true} is VALID [2018-11-18 23:38:55,531 INFO L273 TraceCheckUtils]: 27: Hoare triple {8859#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,533 INFO L273 TraceCheckUtils]: 28: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,535 INFO L273 TraceCheckUtils]: 29: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,535 INFO L273 TraceCheckUtils]: 30: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,537 INFO L273 TraceCheckUtils]: 31: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,537 INFO L273 TraceCheckUtils]: 32: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,537 INFO L273 TraceCheckUtils]: 33: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,538 INFO L273 TraceCheckUtils]: 34: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,538 INFO L273 TraceCheckUtils]: 35: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,538 INFO L273 TraceCheckUtils]: 36: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,539 INFO L273 TraceCheckUtils]: 37: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:38:55,539 INFO L273 TraceCheckUtils]: 38: Hoare triple {8861#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8862#(= |ssl3_accept_#t~mem29| 8496)} is VALID [2018-11-18 23:38:55,539 INFO L273 TraceCheckUtils]: 39: Hoare triple {8862#(= |ssl3_accept_#t~mem29| 8496)} assume 8480 == #t~mem29;havoc #t~mem29; {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 40: Hoare triple {8860#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 41: Hoare triple {8860#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 42: Hoare triple {8860#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 43: Hoare triple {8860#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 44: Hoare triple {8860#false} ~skip~0 := 0; {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 45: Hoare triple {8860#false} assume true; {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 46: Hoare triple {8860#false} assume !false; {8860#false} is VALID [2018-11-18 23:38:55,540 INFO L273 TraceCheckUtils]: 47: Hoare triple {8860#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 48: Hoare triple {8860#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 49: Hoare triple {8860#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 50: Hoare triple {8860#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 51: Hoare triple {8860#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 52: Hoare triple {8860#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 53: Hoare triple {8860#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 54: Hoare triple {8860#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,541 INFO L273 TraceCheckUtils]: 55: Hoare triple {8860#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 56: Hoare triple {8860#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 57: Hoare triple {8860#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 58: Hoare triple {8860#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 59: Hoare triple {8860#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 60: Hoare triple {8860#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 61: Hoare triple {8860#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 62: Hoare triple {8860#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,542 INFO L273 TraceCheckUtils]: 63: Hoare triple {8860#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 64: Hoare triple {8860#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 65: Hoare triple {8860#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 66: Hoare triple {8860#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 67: Hoare triple {8860#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 68: Hoare triple {8860#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 69: Hoare triple {8860#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 70: Hoare triple {8860#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 71: Hoare triple {8860#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,543 INFO L273 TraceCheckUtils]: 72: Hoare triple {8860#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 73: Hoare triple {8860#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 74: Hoare triple {8860#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 75: Hoare triple {8860#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 76: Hoare triple {8860#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 77: Hoare triple {8860#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 78: Hoare triple {8860#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 79: Hoare triple {8860#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {8860#false} is VALID [2018-11-18 23:38:55,544 INFO L273 TraceCheckUtils]: 80: Hoare triple {8860#false} assume 8672 == #t~mem56;havoc #t~mem56; {8860#false} is VALID [2018-11-18 23:38:55,545 INFO L273 TraceCheckUtils]: 81: Hoare triple {8860#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {8860#false} is VALID [2018-11-18 23:38:55,545 INFO L273 TraceCheckUtils]: 82: Hoare triple {8860#false} assume 3 == ~blastFlag~0; {8860#false} is VALID [2018-11-18 23:38:55,545 INFO L273 TraceCheckUtils]: 83: Hoare triple {8860#false} assume !false; {8860#false} is VALID [2018-11-18 23:38:55,550 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:38:55,550 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:55,550 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:55,550 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-18 23:38:55,551 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:55,551 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:55,640 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:55,640 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:55,640 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:55,640 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:55,641 INFO L87 Difference]: Start difference. First operand 172 states and 255 transitions. Second operand 4 states. [2018-11-18 23:38:57,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:57,349 INFO L93 Difference]: Finished difference Result 339 states and 508 transitions. [2018-11-18 23:38:57,349 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:38:57,349 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-18 23:38:57,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:38:57,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:57,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-18 23:38:57,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:38:57,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-18 23:38:57,354 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 457 transitions. [2018-11-18 23:38:57,780 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:57,785 INFO L225 Difference]: With dead ends: 339 [2018-11-18 23:38:57,785 INFO L226 Difference]: Without dead ends: 193 [2018-11-18 23:38:57,785 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:38:57,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2018-11-18 23:38:57,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 172. [2018-11-18 23:38:57,829 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:38:57,829 INFO L82 GeneralOperation]: Start isEquivalent. First operand 193 states. Second operand 172 states. [2018-11-18 23:38:57,829 INFO L74 IsIncluded]: Start isIncluded. First operand 193 states. Second operand 172 states. [2018-11-18 23:38:57,829 INFO L87 Difference]: Start difference. First operand 193 states. Second operand 172 states. [2018-11-18 23:38:57,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:57,834 INFO L93 Difference]: Finished difference Result 193 states and 281 transitions. [2018-11-18 23:38:57,834 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 281 transitions. [2018-11-18 23:38:57,834 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:57,834 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:57,834 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 193 states. [2018-11-18 23:38:57,834 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 193 states. [2018-11-18 23:38:57,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:38:57,838 INFO L93 Difference]: Finished difference Result 193 states and 281 transitions. [2018-11-18 23:38:57,838 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 281 transitions. [2018-11-18 23:38:57,838 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:38:57,838 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:38:57,838 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:38:57,838 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:38:57,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-18 23:38:57,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 254 transitions. [2018-11-18 23:38:57,841 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 254 transitions. Word has length 84 [2018-11-18 23:38:57,841 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:38:57,842 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 254 transitions. [2018-11-18 23:38:57,842 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:38:57,842 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 254 transitions. [2018-11-18 23:38:57,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-18 23:38:57,842 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:38:57,843 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:38:57,843 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:38:57,843 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:38:57,843 INFO L82 PathProgramCache]: Analyzing trace with hash -605694697, now seen corresponding path program 1 times [2018-11-18 23:38:57,843 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:38:57,843 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:38:57,844 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:57,845 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:38:57,845 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:38:57,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:38:58,010 INFO L256 TraceCheckUtils]: 0: Hoare triple {9859#true} call ULTIMATE.init(); {9859#true} is VALID [2018-11-18 23:38:58,011 INFO L273 TraceCheckUtils]: 1: Hoare triple {9859#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,011 INFO L273 TraceCheckUtils]: 2: Hoare triple {9859#true} assume true; {9859#true} is VALID [2018-11-18 23:38:58,011 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9859#true} {9859#true} #649#return; {9859#true} is VALID [2018-11-18 23:38:58,012 INFO L256 TraceCheckUtils]: 4: Hoare triple {9859#true} call #t~ret138 := main(); {9859#true} is VALID [2018-11-18 23:38:58,012 INFO L273 TraceCheckUtils]: 5: Hoare triple {9859#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,012 INFO L256 TraceCheckUtils]: 6: Hoare triple {9859#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {9859#true} is VALID [2018-11-18 23:38:58,012 INFO L273 TraceCheckUtils]: 7: Hoare triple {9859#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,012 INFO L273 TraceCheckUtils]: 8: Hoare triple {9859#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {9859#true} is VALID [2018-11-18 23:38:58,013 INFO L273 TraceCheckUtils]: 9: Hoare triple {9859#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {9859#true} is VALID [2018-11-18 23:38:58,013 INFO L273 TraceCheckUtils]: 10: Hoare triple {9859#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {9859#true} is VALID [2018-11-18 23:38:58,013 INFO L273 TraceCheckUtils]: 11: Hoare triple {9859#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,013 INFO L273 TraceCheckUtils]: 12: Hoare triple {9859#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {9859#true} is VALID [2018-11-18 23:38:58,014 INFO L273 TraceCheckUtils]: 13: Hoare triple {9859#true} assume true; {9859#true} is VALID [2018-11-18 23:38:58,014 INFO L273 TraceCheckUtils]: 14: Hoare triple {9859#true} assume !false; {9859#true} is VALID [2018-11-18 23:38:58,014 INFO L273 TraceCheckUtils]: 15: Hoare triple {9859#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,014 INFO L273 TraceCheckUtils]: 16: Hoare triple {9859#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,014 INFO L273 TraceCheckUtils]: 17: Hoare triple {9859#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,015 INFO L273 TraceCheckUtils]: 18: Hoare triple {9859#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,015 INFO L273 TraceCheckUtils]: 19: Hoare triple {9859#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,015 INFO L273 TraceCheckUtils]: 20: Hoare triple {9859#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,015 INFO L273 TraceCheckUtils]: 21: Hoare triple {9859#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,015 INFO L273 TraceCheckUtils]: 22: Hoare triple {9859#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,015 INFO L273 TraceCheckUtils]: 23: Hoare triple {9859#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,016 INFO L273 TraceCheckUtils]: 24: Hoare triple {9859#true} assume 8464 == #t~mem32;havoc #t~mem32; {9859#true} is VALID [2018-11-18 23:38:58,016 INFO L273 TraceCheckUtils]: 25: Hoare triple {9859#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {9859#true} is VALID [2018-11-18 23:38:58,016 INFO L273 TraceCheckUtils]: 26: Hoare triple {9859#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {9859#true} is VALID [2018-11-18 23:38:58,016 INFO L273 TraceCheckUtils]: 27: Hoare triple {9859#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,016 INFO L273 TraceCheckUtils]: 28: Hoare triple {9859#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,017 INFO L273 TraceCheckUtils]: 29: Hoare triple {9859#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {9859#true} is VALID [2018-11-18 23:38:58,017 INFO L273 TraceCheckUtils]: 30: Hoare triple {9859#true} ~skip~0 := 0; {9859#true} is VALID [2018-11-18 23:38:58,017 INFO L273 TraceCheckUtils]: 31: Hoare triple {9859#true} assume true; {9859#true} is VALID [2018-11-18 23:38:58,017 INFO L273 TraceCheckUtils]: 32: Hoare triple {9859#true} assume !false; {9859#true} is VALID [2018-11-18 23:38:58,017 INFO L273 TraceCheckUtils]: 33: Hoare triple {9859#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,017 INFO L273 TraceCheckUtils]: 34: Hoare triple {9859#true} assume 12292 == #t~mem24;havoc #t~mem24; {9859#true} is VALID [2018-11-18 23:38:58,018 INFO L273 TraceCheckUtils]: 35: Hoare triple {9859#true} call write~int(1, ~s.base, 40 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,018 INFO L273 TraceCheckUtils]: 36: Hoare triple {9859#true} call write~int(1, ~s.base, 36 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,018 INFO L273 TraceCheckUtils]: 37: Hoare triple {9859#true} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {9859#true} is VALID [2018-11-18 23:38:58,018 INFO L273 TraceCheckUtils]: 38: Hoare triple {9859#true} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,018 INFO L273 TraceCheckUtils]: 39: Hoare triple {9859#true} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,019 INFO L273 TraceCheckUtils]: 40: Hoare triple {9859#true} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {9859#true} is VALID [2018-11-18 23:38:58,019 INFO L273 TraceCheckUtils]: 41: Hoare triple {9859#true} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {9859#true} is VALID [2018-11-18 23:38:58,033 INFO L273 TraceCheckUtils]: 42: Hoare triple {9859#true} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,042 INFO L273 TraceCheckUtils]: 43: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,057 INFO L273 TraceCheckUtils]: 44: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,066 INFO L273 TraceCheckUtils]: 45: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,079 INFO L273 TraceCheckUtils]: 46: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume true; {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,088 INFO L273 TraceCheckUtils]: 47: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,102 INFO L273 TraceCheckUtils]: 48: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,111 INFO L273 TraceCheckUtils]: 49: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,123 INFO L273 TraceCheckUtils]: 50: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,136 INFO L273 TraceCheckUtils]: 51: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,151 INFO L273 TraceCheckUtils]: 52: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:38:58,152 INFO L273 TraceCheckUtils]: 53: Hoare triple {9861#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {9862#(= 8480 |ssl3_accept_#t~mem29|)} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 54: Hoare triple {9862#(= 8480 |ssl3_accept_#t~mem29|)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 55: Hoare triple {9860#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 56: Hoare triple {9860#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 57: Hoare triple {9860#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 58: Hoare triple {9860#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 59: Hoare triple {9860#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,157 INFO L273 TraceCheckUtils]: 60: Hoare triple {9860#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 61: Hoare triple {9860#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 62: Hoare triple {9860#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 63: Hoare triple {9860#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 64: Hoare triple {9860#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 65: Hoare triple {9860#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 66: Hoare triple {9860#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 67: Hoare triple {9860#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,158 INFO L273 TraceCheckUtils]: 68: Hoare triple {9860#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 69: Hoare triple {9860#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 70: Hoare triple {9860#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 71: Hoare triple {9860#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 72: Hoare triple {9860#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 73: Hoare triple {9860#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 74: Hoare triple {9860#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 75: Hoare triple {9860#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,159 INFO L273 TraceCheckUtils]: 76: Hoare triple {9860#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 77: Hoare triple {9860#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 78: Hoare triple {9860#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 79: Hoare triple {9860#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 80: Hoare triple {9860#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 81: Hoare triple {9860#false} assume 8672 == #t~mem56;havoc #t~mem56; {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 82: Hoare triple {9860#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 83: Hoare triple {9860#false} assume 3 == ~blastFlag~0; {9860#false} is VALID [2018-11-18 23:38:58,160 INFO L273 TraceCheckUtils]: 84: Hoare triple {9860#false} assume !false; {9860#false} is VALID [2018-11-18 23:38:58,165 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-18 23:38:58,165 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:38:58,166 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:38:58,166 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-18 23:38:58,166 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:38:58,166 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:38:58,252 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:38:58,252 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:38:58,253 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:38:58,253 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:38:58,253 INFO L87 Difference]: Start difference. First operand 172 states and 254 transitions. Second operand 4 states. [2018-11-18 23:39:00,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:00,766 INFO L93 Difference]: Finished difference Result 348 states and 523 transitions. [2018-11-18 23:39:00,766 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:00,766 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-18 23:39:00,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:00,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:00,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 435 transitions. [2018-11-18 23:39:00,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:00,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 435 transitions. [2018-11-18 23:39:00,771 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 435 transitions. [2018-11-18 23:39:01,172 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 435 edges. 435 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:01,176 INFO L225 Difference]: With dead ends: 348 [2018-11-18 23:39:01,177 INFO L226 Difference]: Without dead ends: 202 [2018-11-18 23:39:01,177 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:01,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2018-11-18 23:39:01,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 189. [2018-11-18 23:39:01,226 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:01,226 INFO L82 GeneralOperation]: Start isEquivalent. First operand 202 states. Second operand 189 states. [2018-11-18 23:39:01,226 INFO L74 IsIncluded]: Start isIncluded. First operand 202 states. Second operand 189 states. [2018-11-18 23:39:01,226 INFO L87 Difference]: Start difference. First operand 202 states. Second operand 189 states. [2018-11-18 23:39:01,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:01,230 INFO L93 Difference]: Finished difference Result 202 states and 297 transitions. [2018-11-18 23:39:01,230 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 297 transitions. [2018-11-18 23:39:01,231 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:01,231 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:01,231 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 202 states. [2018-11-18 23:39:01,231 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 202 states. [2018-11-18 23:39:01,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:01,235 INFO L93 Difference]: Finished difference Result 202 states and 297 transitions. [2018-11-18 23:39:01,235 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 297 transitions. [2018-11-18 23:39:01,236 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:01,236 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:01,236 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:01,236 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:01,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-18 23:39:01,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 281 transitions. [2018-11-18 23:39:01,240 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 281 transitions. Word has length 85 [2018-11-18 23:39:01,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:01,240 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 281 transitions. [2018-11-18 23:39:01,240 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:01,241 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 281 transitions. [2018-11-18 23:39:01,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-18 23:39:01,241 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:01,242 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:01,242 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:01,242 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:01,242 INFO L82 PathProgramCache]: Analyzing trace with hash -505491156, now seen corresponding path program 1 times [2018-11-18 23:39:01,242 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:01,243 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:01,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:01,244 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:01,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:01,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:01,394 INFO L256 TraceCheckUtils]: 0: Hoare triple {10904#true} call ULTIMATE.init(); {10904#true} is VALID [2018-11-18 23:39:01,394 INFO L273 TraceCheckUtils]: 1: Hoare triple {10904#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,394 INFO L273 TraceCheckUtils]: 2: Hoare triple {10904#true} assume true; {10904#true} is VALID [2018-11-18 23:39:01,395 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10904#true} {10904#true} #649#return; {10904#true} is VALID [2018-11-18 23:39:01,395 INFO L256 TraceCheckUtils]: 4: Hoare triple {10904#true} call #t~ret138 := main(); {10904#true} is VALID [2018-11-18 23:39:01,395 INFO L273 TraceCheckUtils]: 5: Hoare triple {10904#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,395 INFO L256 TraceCheckUtils]: 6: Hoare triple {10904#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10904#true} is VALID [2018-11-18 23:39:01,396 INFO L273 TraceCheckUtils]: 7: Hoare triple {10904#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,396 INFO L273 TraceCheckUtils]: 8: Hoare triple {10904#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {10904#true} is VALID [2018-11-18 23:39:01,396 INFO L273 TraceCheckUtils]: 9: Hoare triple {10904#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {10904#true} is VALID [2018-11-18 23:39:01,396 INFO L273 TraceCheckUtils]: 10: Hoare triple {10904#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10904#true} is VALID [2018-11-18 23:39:01,396 INFO L273 TraceCheckUtils]: 11: Hoare triple {10904#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,397 INFO L273 TraceCheckUtils]: 12: Hoare triple {10904#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {10904#true} is VALID [2018-11-18 23:39:01,397 INFO L273 TraceCheckUtils]: 13: Hoare triple {10904#true} assume true; {10904#true} is VALID [2018-11-18 23:39:01,397 INFO L273 TraceCheckUtils]: 14: Hoare triple {10904#true} assume !false; {10904#true} is VALID [2018-11-18 23:39:01,397 INFO L273 TraceCheckUtils]: 15: Hoare triple {10904#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,397 INFO L273 TraceCheckUtils]: 16: Hoare triple {10904#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,398 INFO L273 TraceCheckUtils]: 17: Hoare triple {10904#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,398 INFO L273 TraceCheckUtils]: 18: Hoare triple {10904#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,398 INFO L273 TraceCheckUtils]: 19: Hoare triple {10904#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,398 INFO L273 TraceCheckUtils]: 20: Hoare triple {10904#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,399 INFO L273 TraceCheckUtils]: 21: Hoare triple {10904#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,399 INFO L273 TraceCheckUtils]: 22: Hoare triple {10904#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,399 INFO L273 TraceCheckUtils]: 23: Hoare triple {10904#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10904#true} is VALID [2018-11-18 23:39:01,399 INFO L273 TraceCheckUtils]: 24: Hoare triple {10904#true} assume 8464 == #t~mem32;havoc #t~mem32; {10904#true} is VALID [2018-11-18 23:39:01,399 INFO L273 TraceCheckUtils]: 25: Hoare triple {10904#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {10904#true} is VALID [2018-11-18 23:39:01,399 INFO L273 TraceCheckUtils]: 26: Hoare triple {10904#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10904#true} is VALID [2018-11-18 23:39:01,400 INFO L273 TraceCheckUtils]: 27: Hoare triple {10904#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,400 INFO L273 TraceCheckUtils]: 28: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,401 INFO L273 TraceCheckUtils]: 29: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,401 INFO L273 TraceCheckUtils]: 30: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,401 INFO L273 TraceCheckUtils]: 31: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,402 INFO L273 TraceCheckUtils]: 32: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,402 INFO L273 TraceCheckUtils]: 33: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,402 INFO L273 TraceCheckUtils]: 34: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,402 INFO L273 TraceCheckUtils]: 35: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,403 INFO L273 TraceCheckUtils]: 36: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,403 INFO L273 TraceCheckUtils]: 37: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,403 INFO L273 TraceCheckUtils]: 38: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:01,404 INFO L273 TraceCheckUtils]: 39: Hoare triple {10906#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10907#(= |ssl3_accept_#t~mem30| 8496)} is VALID [2018-11-18 23:39:01,404 INFO L273 TraceCheckUtils]: 40: Hoare triple {10907#(= |ssl3_accept_#t~mem30| 8496)} assume 8481 == #t~mem30;havoc #t~mem30; {10905#false} is VALID [2018-11-18 23:39:01,405 INFO L273 TraceCheckUtils]: 41: Hoare triple {10905#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {10905#false} is VALID [2018-11-18 23:39:01,405 INFO L273 TraceCheckUtils]: 42: Hoare triple {10905#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,405 INFO L273 TraceCheckUtils]: 43: Hoare triple {10905#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,405 INFO L273 TraceCheckUtils]: 44: Hoare triple {10905#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10905#false} is VALID [2018-11-18 23:39:01,405 INFO L273 TraceCheckUtils]: 45: Hoare triple {10905#false} ~skip~0 := 0; {10905#false} is VALID [2018-11-18 23:39:01,406 INFO L273 TraceCheckUtils]: 46: Hoare triple {10905#false} assume true; {10905#false} is VALID [2018-11-18 23:39:01,406 INFO L273 TraceCheckUtils]: 47: Hoare triple {10905#false} assume !false; {10905#false} is VALID [2018-11-18 23:39:01,406 INFO L273 TraceCheckUtils]: 48: Hoare triple {10905#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,406 INFO L273 TraceCheckUtils]: 49: Hoare triple {10905#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,406 INFO L273 TraceCheckUtils]: 50: Hoare triple {10905#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,407 INFO L273 TraceCheckUtils]: 51: Hoare triple {10905#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,407 INFO L273 TraceCheckUtils]: 52: Hoare triple {10905#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,407 INFO L273 TraceCheckUtils]: 53: Hoare triple {10905#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,407 INFO L273 TraceCheckUtils]: 54: Hoare triple {10905#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,407 INFO L273 TraceCheckUtils]: 55: Hoare triple {10905#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,408 INFO L273 TraceCheckUtils]: 56: Hoare triple {10905#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,408 INFO L273 TraceCheckUtils]: 57: Hoare triple {10905#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,408 INFO L273 TraceCheckUtils]: 58: Hoare triple {10905#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,408 INFO L273 TraceCheckUtils]: 59: Hoare triple {10905#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,408 INFO L273 TraceCheckUtils]: 60: Hoare triple {10905#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,409 INFO L273 TraceCheckUtils]: 61: Hoare triple {10905#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,409 INFO L273 TraceCheckUtils]: 62: Hoare triple {10905#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,409 INFO L273 TraceCheckUtils]: 63: Hoare triple {10905#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,409 INFO L273 TraceCheckUtils]: 64: Hoare triple {10905#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,409 INFO L273 TraceCheckUtils]: 65: Hoare triple {10905#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 66: Hoare triple {10905#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 67: Hoare triple {10905#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 68: Hoare triple {10905#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 69: Hoare triple {10905#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 70: Hoare triple {10905#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 71: Hoare triple {10905#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 72: Hoare triple {10905#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,410 INFO L273 TraceCheckUtils]: 73: Hoare triple {10905#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 74: Hoare triple {10905#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 75: Hoare triple {10905#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 76: Hoare triple {10905#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 77: Hoare triple {10905#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 78: Hoare triple {10905#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 79: Hoare triple {10905#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 80: Hoare triple {10905#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {10905#false} is VALID [2018-11-18 23:39:01,411 INFO L273 TraceCheckUtils]: 81: Hoare triple {10905#false} assume 8672 == #t~mem56;havoc #t~mem56; {10905#false} is VALID [2018-11-18 23:39:01,412 INFO L273 TraceCheckUtils]: 82: Hoare triple {10905#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {10905#false} is VALID [2018-11-18 23:39:01,412 INFO L273 TraceCheckUtils]: 83: Hoare triple {10905#false} assume 3 == ~blastFlag~0; {10905#false} is VALID [2018-11-18 23:39:01,412 INFO L273 TraceCheckUtils]: 84: Hoare triple {10905#false} assume !false; {10905#false} is VALID [2018-11-18 23:39:01,416 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:01,416 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:01,417 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:39:01,417 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-18 23:39:01,417 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:01,417 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:39:01,494 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:01,494 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:39:01,494 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:39:01,495 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:39:01,495 INFO L87 Difference]: Start difference. First operand 189 states and 281 transitions. Second operand 4 states. [2018-11-18 23:39:03,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:03,411 INFO L93 Difference]: Finished difference Result 371 states and 558 transitions. [2018-11-18 23:39:03,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:03,411 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-18 23:39:03,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:03,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:03,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 454 transitions. [2018-11-18 23:39:03,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:03,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 454 transitions. [2018-11-18 23:39:03,416 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 454 transitions. [2018-11-18 23:39:03,837 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 454 edges. 454 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:03,841 INFO L225 Difference]: With dead ends: 371 [2018-11-18 23:39:03,841 INFO L226 Difference]: Without dead ends: 208 [2018-11-18 23:39:03,841 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:03,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2018-11-18 23:39:03,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 189. [2018-11-18 23:39:03,860 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:03,860 INFO L82 GeneralOperation]: Start isEquivalent. First operand 208 states. Second operand 189 states. [2018-11-18 23:39:03,860 INFO L74 IsIncluded]: Start isIncluded. First operand 208 states. Second operand 189 states. [2018-11-18 23:39:03,861 INFO L87 Difference]: Start difference. First operand 208 states. Second operand 189 states. [2018-11-18 23:39:03,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:03,864 INFO L93 Difference]: Finished difference Result 208 states and 305 transitions. [2018-11-18 23:39:03,864 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 305 transitions. [2018-11-18 23:39:03,865 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:03,865 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:03,865 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 208 states. [2018-11-18 23:39:03,865 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 208 states. [2018-11-18 23:39:03,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:03,869 INFO L93 Difference]: Finished difference Result 208 states and 305 transitions. [2018-11-18 23:39:03,869 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 305 transitions. [2018-11-18 23:39:03,869 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:03,869 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:03,869 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:03,869 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:03,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-18 23:39:03,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 280 transitions. [2018-11-18 23:39:03,872 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 280 transitions. Word has length 85 [2018-11-18 23:39:03,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:03,872 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 280 transitions. [2018-11-18 23:39:03,872 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:03,873 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 280 transitions. [2018-11-18 23:39:03,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-18 23:39:03,873 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:03,874 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:03,874 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:03,874 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:03,874 INFO L82 PathProgramCache]: Analyzing trace with hash 2129804107, now seen corresponding path program 1 times [2018-11-18 23:39:03,874 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:03,874 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:03,875 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:03,875 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:03,876 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:03,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:04,048 INFO L256 TraceCheckUtils]: 0: Hoare triple {11988#true} call ULTIMATE.init(); {11988#true} is VALID [2018-11-18 23:39:04,049 INFO L273 TraceCheckUtils]: 1: Hoare triple {11988#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,049 INFO L273 TraceCheckUtils]: 2: Hoare triple {11988#true} assume true; {11988#true} is VALID [2018-11-18 23:39:04,049 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11988#true} {11988#true} #649#return; {11988#true} is VALID [2018-11-18 23:39:04,049 INFO L256 TraceCheckUtils]: 4: Hoare triple {11988#true} call #t~ret138 := main(); {11988#true} is VALID [2018-11-18 23:39:04,049 INFO L273 TraceCheckUtils]: 5: Hoare triple {11988#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,050 INFO L256 TraceCheckUtils]: 6: Hoare triple {11988#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {11988#true} is VALID [2018-11-18 23:39:04,050 INFO L273 TraceCheckUtils]: 7: Hoare triple {11988#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,050 INFO L273 TraceCheckUtils]: 8: Hoare triple {11988#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {11988#true} is VALID [2018-11-18 23:39:04,050 INFO L273 TraceCheckUtils]: 9: Hoare triple {11988#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {11988#true} is VALID [2018-11-18 23:39:04,051 INFO L273 TraceCheckUtils]: 10: Hoare triple {11988#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {11988#true} is VALID [2018-11-18 23:39:04,051 INFO L273 TraceCheckUtils]: 11: Hoare triple {11988#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,051 INFO L273 TraceCheckUtils]: 12: Hoare triple {11988#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {11988#true} is VALID [2018-11-18 23:39:04,051 INFO L273 TraceCheckUtils]: 13: Hoare triple {11988#true} assume true; {11988#true} is VALID [2018-11-18 23:39:04,051 INFO L273 TraceCheckUtils]: 14: Hoare triple {11988#true} assume !false; {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 15: Hoare triple {11988#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 16: Hoare triple {11988#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 17: Hoare triple {11988#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 18: Hoare triple {11988#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 19: Hoare triple {11988#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 20: Hoare triple {11988#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 21: Hoare triple {11988#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,052 INFO L273 TraceCheckUtils]: 22: Hoare triple {11988#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,053 INFO L273 TraceCheckUtils]: 23: Hoare triple {11988#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11988#true} is VALID [2018-11-18 23:39:04,053 INFO L273 TraceCheckUtils]: 24: Hoare triple {11988#true} assume 8464 == #t~mem32;havoc #t~mem32; {11988#true} is VALID [2018-11-18 23:39:04,053 INFO L273 TraceCheckUtils]: 25: Hoare triple {11988#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {11988#true} is VALID [2018-11-18 23:39:04,053 INFO L273 TraceCheckUtils]: 26: Hoare triple {11988#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {11988#true} is VALID [2018-11-18 23:39:04,054 INFO L273 TraceCheckUtils]: 27: Hoare triple {11988#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,054 INFO L273 TraceCheckUtils]: 28: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,055 INFO L273 TraceCheckUtils]: 29: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,055 INFO L273 TraceCheckUtils]: 30: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,055 INFO L273 TraceCheckUtils]: 31: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,055 INFO L273 TraceCheckUtils]: 32: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,056 INFO L273 TraceCheckUtils]: 33: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,056 INFO L273 TraceCheckUtils]: 34: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,057 INFO L273 TraceCheckUtils]: 35: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,057 INFO L273 TraceCheckUtils]: 36: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,058 INFO L273 TraceCheckUtils]: 37: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,058 INFO L273 TraceCheckUtils]: 38: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,059 INFO L273 TraceCheckUtils]: 39: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:04,060 INFO L273 TraceCheckUtils]: 40: Hoare triple {11990#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11991#(= |ssl3_accept_#t~mem31| 8496)} is VALID [2018-11-18 23:39:04,078 INFO L273 TraceCheckUtils]: 41: Hoare triple {11991#(= |ssl3_accept_#t~mem31| 8496)} assume 8482 == #t~mem31;havoc #t~mem31; {11989#false} is VALID [2018-11-18 23:39:04,078 INFO L273 TraceCheckUtils]: 42: Hoare triple {11989#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,078 INFO L273 TraceCheckUtils]: 43: Hoare triple {11989#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,079 INFO L273 TraceCheckUtils]: 44: Hoare triple {11989#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11989#false} is VALID [2018-11-18 23:39:04,079 INFO L273 TraceCheckUtils]: 45: Hoare triple {11989#false} ~skip~0 := 0; {11989#false} is VALID [2018-11-18 23:39:04,079 INFO L273 TraceCheckUtils]: 46: Hoare triple {11989#false} assume true; {11989#false} is VALID [2018-11-18 23:39:04,079 INFO L273 TraceCheckUtils]: 47: Hoare triple {11989#false} assume !false; {11989#false} is VALID [2018-11-18 23:39:04,079 INFO L273 TraceCheckUtils]: 48: Hoare triple {11989#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,079 INFO L273 TraceCheckUtils]: 49: Hoare triple {11989#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,080 INFO L273 TraceCheckUtils]: 50: Hoare triple {11989#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,080 INFO L273 TraceCheckUtils]: 51: Hoare triple {11989#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,080 INFO L273 TraceCheckUtils]: 52: Hoare triple {11989#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,080 INFO L273 TraceCheckUtils]: 53: Hoare triple {11989#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,080 INFO L273 TraceCheckUtils]: 54: Hoare triple {11989#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,080 INFO L273 TraceCheckUtils]: 55: Hoare triple {11989#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,081 INFO L273 TraceCheckUtils]: 56: Hoare triple {11989#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,081 INFO L273 TraceCheckUtils]: 57: Hoare triple {11989#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,081 INFO L273 TraceCheckUtils]: 58: Hoare triple {11989#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,081 INFO L273 TraceCheckUtils]: 59: Hoare triple {11989#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,081 INFO L273 TraceCheckUtils]: 60: Hoare triple {11989#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,081 INFO L273 TraceCheckUtils]: 61: Hoare triple {11989#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,082 INFO L273 TraceCheckUtils]: 62: Hoare triple {11989#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,082 INFO L273 TraceCheckUtils]: 63: Hoare triple {11989#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,082 INFO L273 TraceCheckUtils]: 64: Hoare triple {11989#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,082 INFO L273 TraceCheckUtils]: 65: Hoare triple {11989#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,082 INFO L273 TraceCheckUtils]: 66: Hoare triple {11989#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,082 INFO L273 TraceCheckUtils]: 67: Hoare triple {11989#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,083 INFO L273 TraceCheckUtils]: 68: Hoare triple {11989#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,083 INFO L273 TraceCheckUtils]: 69: Hoare triple {11989#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,083 INFO L273 TraceCheckUtils]: 70: Hoare triple {11989#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,083 INFO L273 TraceCheckUtils]: 71: Hoare triple {11989#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,083 INFO L273 TraceCheckUtils]: 72: Hoare triple {11989#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,083 INFO L273 TraceCheckUtils]: 73: Hoare triple {11989#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,084 INFO L273 TraceCheckUtils]: 74: Hoare triple {11989#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,084 INFO L273 TraceCheckUtils]: 75: Hoare triple {11989#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,084 INFO L273 TraceCheckUtils]: 76: Hoare triple {11989#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,084 INFO L273 TraceCheckUtils]: 77: Hoare triple {11989#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,084 INFO L273 TraceCheckUtils]: 78: Hoare triple {11989#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,084 INFO L273 TraceCheckUtils]: 79: Hoare triple {11989#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,085 INFO L273 TraceCheckUtils]: 80: Hoare triple {11989#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {11989#false} is VALID [2018-11-18 23:39:04,085 INFO L273 TraceCheckUtils]: 81: Hoare triple {11989#false} assume 8672 == #t~mem56;havoc #t~mem56; {11989#false} is VALID [2018-11-18 23:39:04,085 INFO L273 TraceCheckUtils]: 82: Hoare triple {11989#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {11989#false} is VALID [2018-11-18 23:39:04,085 INFO L273 TraceCheckUtils]: 83: Hoare triple {11989#false} assume 3 == ~blastFlag~0; {11989#false} is VALID [2018-11-18 23:39:04,085 INFO L273 TraceCheckUtils]: 84: Hoare triple {11989#false} assume !false; {11989#false} is VALID [2018-11-18 23:39:04,091 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:04,092 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:04,092 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:39:04,092 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-18 23:39:04,092 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:04,092 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:39:04,188 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:04,188 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:39:04,188 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:39:04,188 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:39:04,189 INFO L87 Difference]: Start difference. First operand 189 states and 280 transitions. Second operand 4 states. [2018-11-18 23:39:05,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:05,897 INFO L93 Difference]: Finished difference Result 370 states and 555 transitions. [2018-11-18 23:39:05,897 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:05,898 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-18 23:39:05,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:05,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:05,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-18 23:39:05,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:05,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-18 23:39:05,902 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 452 transitions. [2018-11-18 23:39:06,310 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:06,315 INFO L225 Difference]: With dead ends: 370 [2018-11-18 23:39:06,315 INFO L226 Difference]: Without dead ends: 207 [2018-11-18 23:39:06,315 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:06,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-18 23:39:06,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 189. [2018-11-18 23:39:06,342 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:06,342 INFO L82 GeneralOperation]: Start isEquivalent. First operand 207 states. Second operand 189 states. [2018-11-18 23:39:06,342 INFO L74 IsIncluded]: Start isIncluded. First operand 207 states. Second operand 189 states. [2018-11-18 23:39:06,343 INFO L87 Difference]: Start difference. First operand 207 states. Second operand 189 states. [2018-11-18 23:39:06,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:06,347 INFO L93 Difference]: Finished difference Result 207 states and 303 transitions. [2018-11-18 23:39:06,347 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 303 transitions. [2018-11-18 23:39:06,348 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:06,348 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:06,348 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 207 states. [2018-11-18 23:39:06,348 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 207 states. [2018-11-18 23:39:06,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:06,353 INFO L93 Difference]: Finished difference Result 207 states and 303 transitions. [2018-11-18 23:39:06,353 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 303 transitions. [2018-11-18 23:39:06,353 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:06,353 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:06,354 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:06,354 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:06,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-18 23:39:06,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 279 transitions. [2018-11-18 23:39:06,358 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 279 transitions. Word has length 85 [2018-11-18 23:39:06,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:06,358 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 279 transitions. [2018-11-18 23:39:06,358 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:06,358 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 279 transitions. [2018-11-18 23:39:06,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-18 23:39:06,359 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:06,359 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:06,359 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:06,359 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:06,360 INFO L82 PathProgramCache]: Analyzing trace with hash 970292068, now seen corresponding path program 1 times [2018-11-18 23:39:06,360 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:06,360 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:06,361 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:06,361 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:06,361 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:06,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:06,886 INFO L256 TraceCheckUtils]: 0: Hoare triple {13068#true} call ULTIMATE.init(); {13068#true} is VALID [2018-11-18 23:39:06,887 INFO L273 TraceCheckUtils]: 1: Hoare triple {13068#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,887 INFO L273 TraceCheckUtils]: 2: Hoare triple {13068#true} assume true; {13068#true} is VALID [2018-11-18 23:39:06,887 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13068#true} {13068#true} #649#return; {13068#true} is VALID [2018-11-18 23:39:06,887 INFO L256 TraceCheckUtils]: 4: Hoare triple {13068#true} call #t~ret138 := main(); {13068#true} is VALID [2018-11-18 23:39:06,888 INFO L273 TraceCheckUtils]: 5: Hoare triple {13068#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,888 INFO L256 TraceCheckUtils]: 6: Hoare triple {13068#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {13068#true} is VALID [2018-11-18 23:39:06,888 INFO L273 TraceCheckUtils]: 7: Hoare triple {13068#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,888 INFO L273 TraceCheckUtils]: 8: Hoare triple {13068#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {13068#true} is VALID [2018-11-18 23:39:06,888 INFO L273 TraceCheckUtils]: 9: Hoare triple {13068#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {13068#true} is VALID [2018-11-18 23:39:06,889 INFO L273 TraceCheckUtils]: 10: Hoare triple {13068#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {13068#true} is VALID [2018-11-18 23:39:06,889 INFO L273 TraceCheckUtils]: 11: Hoare triple {13068#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,889 INFO L273 TraceCheckUtils]: 12: Hoare triple {13068#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {13068#true} is VALID [2018-11-18 23:39:06,889 INFO L273 TraceCheckUtils]: 13: Hoare triple {13068#true} assume true; {13068#true} is VALID [2018-11-18 23:39:06,889 INFO L273 TraceCheckUtils]: 14: Hoare triple {13068#true} assume !false; {13068#true} is VALID [2018-11-18 23:39:06,890 INFO L273 TraceCheckUtils]: 15: Hoare triple {13068#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,890 INFO L273 TraceCheckUtils]: 16: Hoare triple {13068#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,890 INFO L273 TraceCheckUtils]: 17: Hoare triple {13068#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,890 INFO L273 TraceCheckUtils]: 18: Hoare triple {13068#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,890 INFO L273 TraceCheckUtils]: 19: Hoare triple {13068#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,890 INFO L273 TraceCheckUtils]: 20: Hoare triple {13068#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 21: Hoare triple {13068#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 22: Hoare triple {13068#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 23: Hoare triple {13068#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 24: Hoare triple {13068#true} assume 8464 == #t~mem32;havoc #t~mem32; {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 25: Hoare triple {13068#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 26: Hoare triple {13068#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 27: Hoare triple {13068#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,891 INFO L273 TraceCheckUtils]: 28: Hoare triple {13068#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13068#true} is VALID [2018-11-18 23:39:06,892 INFO L273 TraceCheckUtils]: 29: Hoare triple {13068#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13068#true} is VALID [2018-11-18 23:39:06,892 INFO L273 TraceCheckUtils]: 30: Hoare triple {13068#true} ~skip~0 := 0; {13068#true} is VALID [2018-11-18 23:39:06,892 INFO L273 TraceCheckUtils]: 31: Hoare triple {13068#true} assume true; {13068#true} is VALID [2018-11-18 23:39:06,892 INFO L273 TraceCheckUtils]: 32: Hoare triple {13068#true} assume !false; {13068#true} is VALID [2018-11-18 23:39:06,892 INFO L273 TraceCheckUtils]: 33: Hoare triple {13068#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13070#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) |ssl3_accept_#t~mem24|)} is VALID [2018-11-18 23:39:06,893 INFO L273 TraceCheckUtils]: 34: Hoare triple {13070#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) |ssl3_accept_#t~mem24|)} assume 12292 == #t~mem24;havoc #t~mem24; {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,894 INFO L273 TraceCheckUtils]: 35: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call write~int(1, ~s.base, 40 + ~s.offset, 4); {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,894 INFO L273 TraceCheckUtils]: 36: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call write~int(1, ~s.base, 36 + ~s.offset, 4); {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,897 INFO L273 TraceCheckUtils]: 37: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,898 INFO L273 TraceCheckUtils]: 38: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,899 INFO L273 TraceCheckUtils]: 39: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,899 INFO L273 TraceCheckUtils]: 40: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-18 23:39:06,900 INFO L273 TraceCheckUtils]: 41: Hoare triple {13071#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {13072#(= 12292 |ssl3_accept_#t~mem62|)} is VALID [2018-11-18 23:39:06,900 INFO L273 TraceCheckUtils]: 42: Hoare triple {13072#(= 12292 |ssl3_accept_#t~mem62|)} assume 12292 != #t~mem62;havoc #t~mem62; {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 43: Hoare triple {13069#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 44: Hoare triple {13069#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 45: Hoare triple {13069#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 46: Hoare triple {13069#false} ~skip~0 := 0; {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 47: Hoare triple {13069#false} assume true; {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 48: Hoare triple {13069#false} assume !false; {13069#false} is VALID [2018-11-18 23:39:06,901 INFO L273 TraceCheckUtils]: 49: Hoare triple {13069#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 50: Hoare triple {13069#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 51: Hoare triple {13069#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 52: Hoare triple {13069#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 53: Hoare triple {13069#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 54: Hoare triple {13069#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 55: Hoare triple {13069#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,902 INFO L273 TraceCheckUtils]: 56: Hoare triple {13069#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,903 INFO L273 TraceCheckUtils]: 57: Hoare triple {13069#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,903 INFO L273 TraceCheckUtils]: 58: Hoare triple {13069#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,903 INFO L273 TraceCheckUtils]: 59: Hoare triple {13069#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,903 INFO L273 TraceCheckUtils]: 60: Hoare triple {13069#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,903 INFO L273 TraceCheckUtils]: 61: Hoare triple {13069#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,903 INFO L273 TraceCheckUtils]: 62: Hoare triple {13069#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 63: Hoare triple {13069#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 64: Hoare triple {13069#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 65: Hoare triple {13069#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 66: Hoare triple {13069#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 67: Hoare triple {13069#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 68: Hoare triple {13069#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 69: Hoare triple {13069#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 70: Hoare triple {13069#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,904 INFO L273 TraceCheckUtils]: 71: Hoare triple {13069#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 72: Hoare triple {13069#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 73: Hoare triple {13069#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 74: Hoare triple {13069#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 75: Hoare triple {13069#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 76: Hoare triple {13069#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 77: Hoare triple {13069#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 78: Hoare triple {13069#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,905 INFO L273 TraceCheckUtils]: 79: Hoare triple {13069#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,906 INFO L273 TraceCheckUtils]: 80: Hoare triple {13069#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,906 INFO L273 TraceCheckUtils]: 81: Hoare triple {13069#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {13069#false} is VALID [2018-11-18 23:39:06,906 INFO L273 TraceCheckUtils]: 82: Hoare triple {13069#false} assume 8672 == #t~mem56;havoc #t~mem56; {13069#false} is VALID [2018-11-18 23:39:06,906 INFO L273 TraceCheckUtils]: 83: Hoare triple {13069#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {13069#false} is VALID [2018-11-18 23:39:06,906 INFO L273 TraceCheckUtils]: 84: Hoare triple {13069#false} assume 3 == ~blastFlag~0; {13069#false} is VALID [2018-11-18 23:39:06,906 INFO L273 TraceCheckUtils]: 85: Hoare triple {13069#false} assume !false; {13069#false} is VALID [2018-11-18 23:39:06,910 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-18 23:39:06,910 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:06,911 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 23:39:06,911 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 86 [2018-11-18 23:39:06,911 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:06,911 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-18 23:39:06,990 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:06,991 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 23:39:06,991 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 23:39:06,991 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:06,992 INFO L87 Difference]: Start difference. First operand 189 states and 279 transitions. Second operand 5 states. [2018-11-18 23:39:10,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:10,210 INFO L93 Difference]: Finished difference Result 361 states and 541 transitions. [2018-11-18 23:39:10,210 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 23:39:10,210 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 86 [2018-11-18 23:39:10,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:10,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:39:10,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 403 transitions. [2018-11-18 23:39:10,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 23:39:10,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 403 transitions. [2018-11-18 23:39:10,216 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 403 transitions. [2018-11-18 23:39:10,573 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 403 edges. 403 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:10,577 INFO L225 Difference]: With dead ends: 361 [2018-11-18 23:39:10,578 INFO L226 Difference]: Without dead ends: 198 [2018-11-18 23:39:10,578 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-18 23:39:10,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2018-11-18 23:39:10,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 198. [2018-11-18 23:39:10,631 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:10,631 INFO L82 GeneralOperation]: Start isEquivalent. First operand 198 states. Second operand 198 states. [2018-11-18 23:39:10,631 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 198 states. [2018-11-18 23:39:10,631 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 198 states. [2018-11-18 23:39:10,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:10,634 INFO L93 Difference]: Finished difference Result 198 states and 290 transitions. [2018-11-18 23:39:10,635 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 290 transitions. [2018-11-18 23:39:10,635 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:10,635 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:10,635 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 198 states. [2018-11-18 23:39:10,636 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 198 states. [2018-11-18 23:39:10,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:10,640 INFO L93 Difference]: Finished difference Result 198 states and 290 transitions. [2018-11-18 23:39:10,640 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 290 transitions. [2018-11-18 23:39:10,640 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:10,641 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:10,641 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:10,641 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:10,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2018-11-18 23:39:10,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 290 transitions. [2018-11-18 23:39:10,645 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 290 transitions. Word has length 86 [2018-11-18 23:39:10,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:10,645 INFO L480 AbstractCegarLoop]: Abstraction has 198 states and 290 transitions. [2018-11-18 23:39:10,645 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 23:39:10,646 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 290 transitions. [2018-11-18 23:39:10,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-18 23:39:10,646 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:10,647 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:10,647 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:10,647 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:10,647 INFO L82 PathProgramCache]: Analyzing trace with hash -1155207688, now seen corresponding path program 1 times [2018-11-18 23:39:10,647 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:10,648 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:10,648 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:10,649 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:10,649 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:10,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:10,766 INFO L256 TraceCheckUtils]: 0: Hoare triple {14129#true} call ULTIMATE.init(); {14129#true} is VALID [2018-11-18 23:39:10,767 INFO L273 TraceCheckUtils]: 1: Hoare triple {14129#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,767 INFO L273 TraceCheckUtils]: 2: Hoare triple {14129#true} assume true; {14129#true} is VALID [2018-11-18 23:39:10,767 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14129#true} {14129#true} #649#return; {14129#true} is VALID [2018-11-18 23:39:10,767 INFO L256 TraceCheckUtils]: 4: Hoare triple {14129#true} call #t~ret138 := main(); {14129#true} is VALID [2018-11-18 23:39:10,768 INFO L273 TraceCheckUtils]: 5: Hoare triple {14129#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,768 INFO L256 TraceCheckUtils]: 6: Hoare triple {14129#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14129#true} is VALID [2018-11-18 23:39:10,768 INFO L273 TraceCheckUtils]: 7: Hoare triple {14129#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,768 INFO L273 TraceCheckUtils]: 8: Hoare triple {14129#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14129#true} is VALID [2018-11-18 23:39:10,769 INFO L273 TraceCheckUtils]: 9: Hoare triple {14129#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {14129#true} is VALID [2018-11-18 23:39:10,769 INFO L273 TraceCheckUtils]: 10: Hoare triple {14129#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {14129#true} is VALID [2018-11-18 23:39:10,769 INFO L273 TraceCheckUtils]: 11: Hoare triple {14129#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,769 INFO L273 TraceCheckUtils]: 12: Hoare triple {14129#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {14129#true} is VALID [2018-11-18 23:39:10,769 INFO L273 TraceCheckUtils]: 13: Hoare triple {14129#true} assume true; {14129#true} is VALID [2018-11-18 23:39:10,769 INFO L273 TraceCheckUtils]: 14: Hoare triple {14129#true} assume !false; {14129#true} is VALID [2018-11-18 23:39:10,770 INFO L273 TraceCheckUtils]: 15: Hoare triple {14129#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,770 INFO L273 TraceCheckUtils]: 16: Hoare triple {14129#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,770 INFO L273 TraceCheckUtils]: 17: Hoare triple {14129#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,770 INFO L273 TraceCheckUtils]: 18: Hoare triple {14129#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,770 INFO L273 TraceCheckUtils]: 19: Hoare triple {14129#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,770 INFO L273 TraceCheckUtils]: 20: Hoare triple {14129#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,771 INFO L273 TraceCheckUtils]: 21: Hoare triple {14129#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,771 INFO L273 TraceCheckUtils]: 22: Hoare triple {14129#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,771 INFO L273 TraceCheckUtils]: 23: Hoare triple {14129#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14129#true} is VALID [2018-11-18 23:39:10,771 INFO L273 TraceCheckUtils]: 24: Hoare triple {14129#true} assume 8464 == #t~mem32;havoc #t~mem32; {14129#true} is VALID [2018-11-18 23:39:10,771 INFO L273 TraceCheckUtils]: 25: Hoare triple {14129#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {14129#true} is VALID [2018-11-18 23:39:10,771 INFO L273 TraceCheckUtils]: 26: Hoare triple {14129#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {14129#true} is VALID [2018-11-18 23:39:10,780 INFO L273 TraceCheckUtils]: 27: Hoare triple {14129#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,785 INFO L273 TraceCheckUtils]: 28: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,785 INFO L273 TraceCheckUtils]: 29: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,787 INFO L273 TraceCheckUtils]: 30: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,787 INFO L273 TraceCheckUtils]: 31: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,789 INFO L273 TraceCheckUtils]: 32: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,789 INFO L273 TraceCheckUtils]: 33: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:10,789 INFO L273 TraceCheckUtils]: 34: Hoare triple {14131#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14132#(= |ssl3_accept_#t~mem25| 8496)} is VALID [2018-11-18 23:39:10,790 INFO L273 TraceCheckUtils]: 35: Hoare triple {14132#(= |ssl3_accept_#t~mem25| 8496)} assume 16384 == #t~mem25;havoc #t~mem25; {14130#false} is VALID [2018-11-18 23:39:10,790 INFO L273 TraceCheckUtils]: 36: Hoare triple {14130#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,790 INFO L273 TraceCheckUtils]: 37: Hoare triple {14130#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {14130#false} is VALID [2018-11-18 23:39:10,790 INFO L273 TraceCheckUtils]: 38: Hoare triple {14130#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,790 INFO L273 TraceCheckUtils]: 39: Hoare triple {14130#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,791 INFO L273 TraceCheckUtils]: 40: Hoare triple {14130#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {14130#false} is VALID [2018-11-18 23:39:10,791 INFO L273 TraceCheckUtils]: 41: Hoare triple {14130#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,791 INFO L273 TraceCheckUtils]: 42: Hoare triple {14130#false} assume 12292 != #t~mem62;havoc #t~mem62; {14130#false} is VALID [2018-11-18 23:39:10,791 INFO L273 TraceCheckUtils]: 43: Hoare triple {14130#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {14130#false} is VALID [2018-11-18 23:39:10,791 INFO L273 TraceCheckUtils]: 44: Hoare triple {14130#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,791 INFO L273 TraceCheckUtils]: 45: Hoare triple {14130#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14130#false} is VALID [2018-11-18 23:39:10,792 INFO L273 TraceCheckUtils]: 46: Hoare triple {14130#false} ~skip~0 := 0; {14130#false} is VALID [2018-11-18 23:39:10,792 INFO L273 TraceCheckUtils]: 47: Hoare triple {14130#false} assume true; {14130#false} is VALID [2018-11-18 23:39:10,792 INFO L273 TraceCheckUtils]: 48: Hoare triple {14130#false} assume !false; {14130#false} is VALID [2018-11-18 23:39:10,792 INFO L273 TraceCheckUtils]: 49: Hoare triple {14130#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,792 INFO L273 TraceCheckUtils]: 50: Hoare triple {14130#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,792 INFO L273 TraceCheckUtils]: 51: Hoare triple {14130#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,793 INFO L273 TraceCheckUtils]: 52: Hoare triple {14130#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,793 INFO L273 TraceCheckUtils]: 53: Hoare triple {14130#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,793 INFO L273 TraceCheckUtils]: 54: Hoare triple {14130#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,793 INFO L273 TraceCheckUtils]: 55: Hoare triple {14130#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,793 INFO L273 TraceCheckUtils]: 56: Hoare triple {14130#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,794 INFO L273 TraceCheckUtils]: 57: Hoare triple {14130#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,794 INFO L273 TraceCheckUtils]: 58: Hoare triple {14130#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,794 INFO L273 TraceCheckUtils]: 59: Hoare triple {14130#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,794 INFO L273 TraceCheckUtils]: 60: Hoare triple {14130#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,794 INFO L273 TraceCheckUtils]: 61: Hoare triple {14130#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,794 INFO L273 TraceCheckUtils]: 62: Hoare triple {14130#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,795 INFO L273 TraceCheckUtils]: 63: Hoare triple {14130#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,795 INFO L273 TraceCheckUtils]: 64: Hoare triple {14130#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,795 INFO L273 TraceCheckUtils]: 65: Hoare triple {14130#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,795 INFO L273 TraceCheckUtils]: 66: Hoare triple {14130#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,795 INFO L273 TraceCheckUtils]: 67: Hoare triple {14130#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,795 INFO L273 TraceCheckUtils]: 68: Hoare triple {14130#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,796 INFO L273 TraceCheckUtils]: 69: Hoare triple {14130#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,796 INFO L273 TraceCheckUtils]: 70: Hoare triple {14130#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,796 INFO L273 TraceCheckUtils]: 71: Hoare triple {14130#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,796 INFO L273 TraceCheckUtils]: 72: Hoare triple {14130#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,796 INFO L273 TraceCheckUtils]: 73: Hoare triple {14130#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,796 INFO L273 TraceCheckUtils]: 74: Hoare triple {14130#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,797 INFO L273 TraceCheckUtils]: 75: Hoare triple {14130#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,797 INFO L273 TraceCheckUtils]: 76: Hoare triple {14130#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,797 INFO L273 TraceCheckUtils]: 77: Hoare triple {14130#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,797 INFO L273 TraceCheckUtils]: 78: Hoare triple {14130#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,797 INFO L273 TraceCheckUtils]: 79: Hoare triple {14130#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,797 INFO L273 TraceCheckUtils]: 80: Hoare triple {14130#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,798 INFO L273 TraceCheckUtils]: 81: Hoare triple {14130#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {14130#false} is VALID [2018-11-18 23:39:10,798 INFO L273 TraceCheckUtils]: 82: Hoare triple {14130#false} assume 8672 == #t~mem56;havoc #t~mem56; {14130#false} is VALID [2018-11-18 23:39:10,798 INFO L273 TraceCheckUtils]: 83: Hoare triple {14130#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {14130#false} is VALID [2018-11-18 23:39:10,798 INFO L273 TraceCheckUtils]: 84: Hoare triple {14130#false} assume 3 == ~blastFlag~0; {14130#false} is VALID [2018-11-18 23:39:10,798 INFO L273 TraceCheckUtils]: 85: Hoare triple {14130#false} assume !false; {14130#false} is VALID [2018-11-18 23:39:10,803 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:10,804 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:10,804 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:39:10,804 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-18 23:39:10,804 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:10,805 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:39:10,915 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:10,915 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:39:10,915 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:39:10,915 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:39:10,916 INFO L87 Difference]: Start difference. First operand 198 states and 290 transitions. Second operand 4 states. [2018-11-18 23:39:12,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:12,850 INFO L93 Difference]: Finished difference Result 397 states and 586 transitions. [2018-11-18 23:39:12,850 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:12,850 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-18 23:39:12,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:12,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:12,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 451 transitions. [2018-11-18 23:39:12,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:12,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 451 transitions. [2018-11-18 23:39:12,855 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 451 transitions. [2018-11-18 23:39:13,308 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 451 edges. 451 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:13,313 INFO L225 Difference]: With dead ends: 397 [2018-11-18 23:39:13,313 INFO L226 Difference]: Without dead ends: 225 [2018-11-18 23:39:13,314 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:13,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2018-11-18 23:39:13,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 198. [2018-11-18 23:39:13,369 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:13,369 INFO L82 GeneralOperation]: Start isEquivalent. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:13,369 INFO L74 IsIncluded]: Start isIncluded. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:13,369 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:13,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:13,373 INFO L93 Difference]: Finished difference Result 225 states and 324 transitions. [2018-11-18 23:39:13,373 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 324 transitions. [2018-11-18 23:39:13,374 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:13,374 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:13,374 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 225 states. [2018-11-18 23:39:13,374 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 225 states. [2018-11-18 23:39:13,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:13,378 INFO L93 Difference]: Finished difference Result 225 states and 324 transitions. [2018-11-18 23:39:13,378 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 324 transitions. [2018-11-18 23:39:13,378 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:13,378 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:13,378 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:13,379 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:13,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2018-11-18 23:39:13,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 289 transitions. [2018-11-18 23:39:13,382 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 289 transitions. Word has length 86 [2018-11-18 23:39:13,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:13,382 INFO L480 AbstractCegarLoop]: Abstraction has 198 states and 289 transitions. [2018-11-18 23:39:13,382 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:13,382 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 289 transitions. [2018-11-18 23:39:13,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-18 23:39:13,383 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:13,383 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:13,383 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:13,383 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:13,384 INFO L82 PathProgramCache]: Analyzing trace with hash 1327326287, now seen corresponding path program 1 times [2018-11-18 23:39:13,384 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:13,384 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:13,384 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:13,384 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:13,385 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:13,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:13,897 INFO L256 TraceCheckUtils]: 0: Hoare triple {15285#true} call ULTIMATE.init(); {15285#true} is VALID [2018-11-18 23:39:13,897 INFO L273 TraceCheckUtils]: 1: Hoare triple {15285#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,897 INFO L273 TraceCheckUtils]: 2: Hoare triple {15285#true} assume true; {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15285#true} {15285#true} #649#return; {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L256 TraceCheckUtils]: 4: Hoare triple {15285#true} call #t~ret138 := main(); {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L273 TraceCheckUtils]: 5: Hoare triple {15285#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L256 TraceCheckUtils]: 6: Hoare triple {15285#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L273 TraceCheckUtils]: 7: Hoare triple {15285#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L273 TraceCheckUtils]: 8: Hoare triple {15285#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L273 TraceCheckUtils]: 9: Hoare triple {15285#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {15285#true} is VALID [2018-11-18 23:39:13,898 INFO L273 TraceCheckUtils]: 10: Hoare triple {15285#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15285#true} is VALID [2018-11-18 23:39:13,899 INFO L273 TraceCheckUtils]: 11: Hoare triple {15285#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,899 INFO L273 TraceCheckUtils]: 12: Hoare triple {15285#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {15285#true} is VALID [2018-11-18 23:39:13,899 INFO L273 TraceCheckUtils]: 13: Hoare triple {15285#true} assume true; {15285#true} is VALID [2018-11-18 23:39:13,899 INFO L273 TraceCheckUtils]: 14: Hoare triple {15285#true} assume !false; {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 15: Hoare triple {15285#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 16: Hoare triple {15285#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 17: Hoare triple {15285#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 18: Hoare triple {15285#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 19: Hoare triple {15285#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 20: Hoare triple {15285#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 21: Hoare triple {15285#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 22: Hoare triple {15285#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,900 INFO L273 TraceCheckUtils]: 23: Hoare triple {15285#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15285#true} is VALID [2018-11-18 23:39:13,901 INFO L273 TraceCheckUtils]: 24: Hoare triple {15285#true} assume 8464 == #t~mem32;havoc #t~mem32; {15285#true} is VALID [2018-11-18 23:39:13,901 INFO L273 TraceCheckUtils]: 25: Hoare triple {15285#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {15285#true} is VALID [2018-11-18 23:39:13,901 INFO L273 TraceCheckUtils]: 26: Hoare triple {15285#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15285#true} is VALID [2018-11-18 23:39:13,902 INFO L273 TraceCheckUtils]: 27: Hoare triple {15285#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,902 INFO L273 TraceCheckUtils]: 28: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,905 INFO L273 TraceCheckUtils]: 29: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,905 INFO L273 TraceCheckUtils]: 30: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,905 INFO L273 TraceCheckUtils]: 31: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,906 INFO L273 TraceCheckUtils]: 32: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,906 INFO L273 TraceCheckUtils]: 33: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,907 INFO L273 TraceCheckUtils]: 34: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:13,907 INFO L273 TraceCheckUtils]: 35: Hoare triple {15287#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15288#(= |ssl3_accept_#t~mem26| 8496)} is VALID [2018-11-18 23:39:13,907 INFO L273 TraceCheckUtils]: 36: Hoare triple {15288#(= |ssl3_accept_#t~mem26| 8496)} assume 8192 == #t~mem26;havoc #t~mem26; {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 37: Hoare triple {15286#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 38: Hoare triple {15286#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 39: Hoare triple {15286#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 40: Hoare triple {15286#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 41: Hoare triple {15286#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 42: Hoare triple {15286#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 43: Hoare triple {15286#false} assume 12292 != #t~mem62;havoc #t~mem62; {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 44: Hoare triple {15286#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {15286#false} is VALID [2018-11-18 23:39:13,908 INFO L273 TraceCheckUtils]: 45: Hoare triple {15286#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 46: Hoare triple {15286#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 47: Hoare triple {15286#false} ~skip~0 := 0; {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 48: Hoare triple {15286#false} assume true; {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 49: Hoare triple {15286#false} assume !false; {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 50: Hoare triple {15286#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 51: Hoare triple {15286#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 52: Hoare triple {15286#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,909 INFO L273 TraceCheckUtils]: 53: Hoare triple {15286#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 54: Hoare triple {15286#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 55: Hoare triple {15286#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 56: Hoare triple {15286#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 57: Hoare triple {15286#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 58: Hoare triple {15286#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 59: Hoare triple {15286#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 60: Hoare triple {15286#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 61: Hoare triple {15286#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,910 INFO L273 TraceCheckUtils]: 62: Hoare triple {15286#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 63: Hoare triple {15286#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 64: Hoare triple {15286#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 65: Hoare triple {15286#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 66: Hoare triple {15286#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 67: Hoare triple {15286#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 68: Hoare triple {15286#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 69: Hoare triple {15286#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,911 INFO L273 TraceCheckUtils]: 70: Hoare triple {15286#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 71: Hoare triple {15286#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 72: Hoare triple {15286#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 73: Hoare triple {15286#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 74: Hoare triple {15286#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 75: Hoare triple {15286#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 76: Hoare triple {15286#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 77: Hoare triple {15286#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,912 INFO L273 TraceCheckUtils]: 78: Hoare triple {15286#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 79: Hoare triple {15286#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 80: Hoare triple {15286#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 81: Hoare triple {15286#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 82: Hoare triple {15286#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 83: Hoare triple {15286#false} assume 8672 == #t~mem56;havoc #t~mem56; {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 84: Hoare triple {15286#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 85: Hoare triple {15286#false} assume 3 == ~blastFlag~0; {15286#false} is VALID [2018-11-18 23:39:13,913 INFO L273 TraceCheckUtils]: 86: Hoare triple {15286#false} assume !false; {15286#false} is VALID [2018-11-18 23:39:13,917 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:13,918 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:13,918 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:39:13,918 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-18 23:39:13,918 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:13,918 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:39:14,017 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:14,017 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:39:14,017 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:39:14,017 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:39:14,018 INFO L87 Difference]: Start difference. First operand 198 states and 289 transitions. Second operand 4 states. [2018-11-18 23:39:16,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:16,369 INFO L93 Difference]: Finished difference Result 397 states and 584 transitions. [2018-11-18 23:39:16,369 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:16,369 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-18 23:39:16,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:16,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:16,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-18 23:39:16,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:16,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-18 23:39:16,373 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 450 transitions. [2018-11-18 23:39:16,784 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 450 edges. 450 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:16,788 INFO L225 Difference]: With dead ends: 397 [2018-11-18 23:39:16,788 INFO L226 Difference]: Without dead ends: 225 [2018-11-18 23:39:16,789 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:16,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2018-11-18 23:39:17,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 198. [2018-11-18 23:39:17,142 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:17,142 INFO L82 GeneralOperation]: Start isEquivalent. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:17,143 INFO L74 IsIncluded]: Start isIncluded. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:17,143 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:17,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:17,149 INFO L93 Difference]: Finished difference Result 225 states and 323 transitions. [2018-11-18 23:39:17,149 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 323 transitions. [2018-11-18 23:39:17,149 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:17,150 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:17,150 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 225 states. [2018-11-18 23:39:17,150 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 225 states. [2018-11-18 23:39:17,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:17,154 INFO L93 Difference]: Finished difference Result 225 states and 323 transitions. [2018-11-18 23:39:17,155 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 323 transitions. [2018-11-18 23:39:17,155 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:17,155 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:17,155 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:17,156 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:17,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2018-11-18 23:39:17,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 288 transitions. [2018-11-18 23:39:17,160 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 288 transitions. Word has length 87 [2018-11-18 23:39:17,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:17,160 INFO L480 AbstractCegarLoop]: Abstraction has 198 states and 288 transitions. [2018-11-18 23:39:17,160 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:17,160 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 288 transitions. [2018-11-18 23:39:17,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2018-11-18 23:39:17,161 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:17,161 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:17,161 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:17,162 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:17,162 INFO L82 PathProgramCache]: Analyzing trace with hash -1947513443, now seen corresponding path program 1 times [2018-11-18 23:39:17,162 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:17,162 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:17,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:17,163 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:17,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:17,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:17,440 WARN L180 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 12 DAG size of output: 9 [2018-11-18 23:39:17,723 INFO L256 TraceCheckUtils]: 0: Hoare triple {16441#true} call ULTIMATE.init(); {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L273 TraceCheckUtils]: 1: Hoare triple {16441#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L273 TraceCheckUtils]: 2: Hoare triple {16441#true} assume true; {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16441#true} {16441#true} #649#return; {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L256 TraceCheckUtils]: 4: Hoare triple {16441#true} call #t~ret138 := main(); {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L273 TraceCheckUtils]: 5: Hoare triple {16441#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L256 TraceCheckUtils]: 6: Hoare triple {16441#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L273 TraceCheckUtils]: 7: Hoare triple {16441#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,724 INFO L273 TraceCheckUtils]: 8: Hoare triple {16441#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {16441#true} is VALID [2018-11-18 23:39:17,725 INFO L273 TraceCheckUtils]: 9: Hoare triple {16441#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {16441#true} is VALID [2018-11-18 23:39:17,725 INFO L273 TraceCheckUtils]: 10: Hoare triple {16441#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {16441#true} is VALID [2018-11-18 23:39:17,725 INFO L273 TraceCheckUtils]: 11: Hoare triple {16441#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,725 INFO L273 TraceCheckUtils]: 12: Hoare triple {16441#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {16441#true} is VALID [2018-11-18 23:39:17,725 INFO L273 TraceCheckUtils]: 13: Hoare triple {16441#true} assume true; {16441#true} is VALID [2018-11-18 23:39:17,726 INFO L273 TraceCheckUtils]: 14: Hoare triple {16441#true} assume !false; {16441#true} is VALID [2018-11-18 23:39:17,726 INFO L273 TraceCheckUtils]: 15: Hoare triple {16441#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,726 INFO L273 TraceCheckUtils]: 16: Hoare triple {16441#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,726 INFO L273 TraceCheckUtils]: 17: Hoare triple {16441#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,726 INFO L273 TraceCheckUtils]: 18: Hoare triple {16441#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,726 INFO L273 TraceCheckUtils]: 19: Hoare triple {16441#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,727 INFO L273 TraceCheckUtils]: 20: Hoare triple {16441#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,727 INFO L273 TraceCheckUtils]: 21: Hoare triple {16441#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,727 INFO L273 TraceCheckUtils]: 22: Hoare triple {16441#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,727 INFO L273 TraceCheckUtils]: 23: Hoare triple {16441#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16441#true} is VALID [2018-11-18 23:39:17,727 INFO L273 TraceCheckUtils]: 24: Hoare triple {16441#true} assume 8464 == #t~mem32;havoc #t~mem32; {16441#true} is VALID [2018-11-18 23:39:17,728 INFO L273 TraceCheckUtils]: 25: Hoare triple {16441#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {16441#true} is VALID [2018-11-18 23:39:17,728 INFO L273 TraceCheckUtils]: 26: Hoare triple {16441#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {16441#true} is VALID [2018-11-18 23:39:17,729 INFO L273 TraceCheckUtils]: 27: Hoare triple {16441#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,729 INFO L273 TraceCheckUtils]: 28: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,731 INFO L273 TraceCheckUtils]: 29: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,731 INFO L273 TraceCheckUtils]: 30: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,731 INFO L273 TraceCheckUtils]: 31: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,732 INFO L273 TraceCheckUtils]: 32: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,732 INFO L273 TraceCheckUtils]: 33: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,733 INFO L273 TraceCheckUtils]: 34: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,733 INFO L273 TraceCheckUtils]: 35: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:17,734 INFO L273 TraceCheckUtils]: 36: Hoare triple {16443#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16444#(= |ssl3_accept_#t~mem27| 8496)} is VALID [2018-11-18 23:39:17,734 INFO L273 TraceCheckUtils]: 37: Hoare triple {16444#(= |ssl3_accept_#t~mem27| 8496)} assume 24576 == #t~mem27;havoc #t~mem27; {16442#false} is VALID [2018-11-18 23:39:17,735 INFO L273 TraceCheckUtils]: 38: Hoare triple {16442#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,735 INFO L273 TraceCheckUtils]: 39: Hoare triple {16442#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {16442#false} is VALID [2018-11-18 23:39:17,735 INFO L273 TraceCheckUtils]: 40: Hoare triple {16442#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,735 INFO L273 TraceCheckUtils]: 41: Hoare triple {16442#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,735 INFO L273 TraceCheckUtils]: 42: Hoare triple {16442#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {16442#false} is VALID [2018-11-18 23:39:17,736 INFO L273 TraceCheckUtils]: 43: Hoare triple {16442#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,736 INFO L273 TraceCheckUtils]: 44: Hoare triple {16442#false} assume 12292 != #t~mem62;havoc #t~mem62; {16442#false} is VALID [2018-11-18 23:39:17,736 INFO L273 TraceCheckUtils]: 45: Hoare triple {16442#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {16442#false} is VALID [2018-11-18 23:39:17,736 INFO L273 TraceCheckUtils]: 46: Hoare triple {16442#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,736 INFO L273 TraceCheckUtils]: 47: Hoare triple {16442#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16442#false} is VALID [2018-11-18 23:39:17,737 INFO L273 TraceCheckUtils]: 48: Hoare triple {16442#false} ~skip~0 := 0; {16442#false} is VALID [2018-11-18 23:39:17,737 INFO L273 TraceCheckUtils]: 49: Hoare triple {16442#false} assume true; {16442#false} is VALID [2018-11-18 23:39:17,737 INFO L273 TraceCheckUtils]: 50: Hoare triple {16442#false} assume !false; {16442#false} is VALID [2018-11-18 23:39:17,737 INFO L273 TraceCheckUtils]: 51: Hoare triple {16442#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,737 INFO L273 TraceCheckUtils]: 52: Hoare triple {16442#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,738 INFO L273 TraceCheckUtils]: 53: Hoare triple {16442#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,738 INFO L273 TraceCheckUtils]: 54: Hoare triple {16442#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,738 INFO L273 TraceCheckUtils]: 55: Hoare triple {16442#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,738 INFO L273 TraceCheckUtils]: 56: Hoare triple {16442#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,738 INFO L273 TraceCheckUtils]: 57: Hoare triple {16442#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,738 INFO L273 TraceCheckUtils]: 58: Hoare triple {16442#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,739 INFO L273 TraceCheckUtils]: 59: Hoare triple {16442#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,739 INFO L273 TraceCheckUtils]: 60: Hoare triple {16442#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,739 INFO L273 TraceCheckUtils]: 61: Hoare triple {16442#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,739 INFO L273 TraceCheckUtils]: 62: Hoare triple {16442#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,739 INFO L273 TraceCheckUtils]: 63: Hoare triple {16442#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,740 INFO L273 TraceCheckUtils]: 64: Hoare triple {16442#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,740 INFO L273 TraceCheckUtils]: 65: Hoare triple {16442#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,740 INFO L273 TraceCheckUtils]: 66: Hoare triple {16442#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,740 INFO L273 TraceCheckUtils]: 67: Hoare triple {16442#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,740 INFO L273 TraceCheckUtils]: 68: Hoare triple {16442#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,740 INFO L273 TraceCheckUtils]: 69: Hoare triple {16442#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 70: Hoare triple {16442#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 71: Hoare triple {16442#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 72: Hoare triple {16442#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 73: Hoare triple {16442#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 74: Hoare triple {16442#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 75: Hoare triple {16442#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 76: Hoare triple {16442#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,741 INFO L273 TraceCheckUtils]: 77: Hoare triple {16442#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 78: Hoare triple {16442#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 79: Hoare triple {16442#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 80: Hoare triple {16442#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 81: Hoare triple {16442#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 82: Hoare triple {16442#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 83: Hoare triple {16442#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {16442#false} is VALID [2018-11-18 23:39:17,742 INFO L273 TraceCheckUtils]: 84: Hoare triple {16442#false} assume 8672 == #t~mem56;havoc #t~mem56; {16442#false} is VALID [2018-11-18 23:39:17,743 INFO L273 TraceCheckUtils]: 85: Hoare triple {16442#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {16442#false} is VALID [2018-11-18 23:39:17,743 INFO L273 TraceCheckUtils]: 86: Hoare triple {16442#false} assume 3 == ~blastFlag~0; {16442#false} is VALID [2018-11-18 23:39:17,743 INFO L273 TraceCheckUtils]: 87: Hoare triple {16442#false} assume !false; {16442#false} is VALID [2018-11-18 23:39:17,750 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:17,751 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:17,751 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:39:17,751 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 88 [2018-11-18 23:39:17,751 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:17,752 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:39:17,874 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:17,874 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:39:17,875 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:39:17,875 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:39:17,875 INFO L87 Difference]: Start difference. First operand 198 states and 288 transitions. Second operand 4 states. [2018-11-18 23:39:20,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:20,708 INFO L93 Difference]: Finished difference Result 397 states and 582 transitions. [2018-11-18 23:39:20,708 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:20,708 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 88 [2018-11-18 23:39:20,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:20,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:20,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-18 23:39:20,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:20,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-18 23:39:20,712 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 449 transitions. [2018-11-18 23:39:21,131 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:21,136 INFO L225 Difference]: With dead ends: 397 [2018-11-18 23:39:21,136 INFO L226 Difference]: Without dead ends: 225 [2018-11-18 23:39:21,137 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:21,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2018-11-18 23:39:21,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 198. [2018-11-18 23:39:21,186 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:21,186 INFO L82 GeneralOperation]: Start isEquivalent. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:21,186 INFO L74 IsIncluded]: Start isIncluded. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:21,187 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 198 states. [2018-11-18 23:39:21,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:21,191 INFO L93 Difference]: Finished difference Result 225 states and 322 transitions. [2018-11-18 23:39:21,191 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 322 transitions. [2018-11-18 23:39:21,192 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:21,192 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:21,192 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 225 states. [2018-11-18 23:39:21,192 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 225 states. [2018-11-18 23:39:21,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:21,197 INFO L93 Difference]: Finished difference Result 225 states and 322 transitions. [2018-11-18 23:39:21,197 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 322 transitions. [2018-11-18 23:39:21,197 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:21,198 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:21,198 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:21,198 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:21,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2018-11-18 23:39:21,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 287 transitions. [2018-11-18 23:39:21,202 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 287 transitions. Word has length 88 [2018-11-18 23:39:21,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:21,202 INFO L480 AbstractCegarLoop]: Abstraction has 198 states and 287 transitions. [2018-11-18 23:39:21,202 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:21,202 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 287 transitions. [2018-11-18 23:39:21,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2018-11-18 23:39:21,203 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:21,203 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:21,204 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:21,204 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:21,204 INFO L82 PathProgramCache]: Analyzing trace with hash 982655700, now seen corresponding path program 1 times [2018-11-18 23:39:21,204 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:21,204 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:21,205 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:21,205 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:21,205 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:21,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:21,566 INFO L256 TraceCheckUtils]: 0: Hoare triple {17597#true} call ULTIMATE.init(); {17597#true} is VALID [2018-11-18 23:39:21,567 INFO L273 TraceCheckUtils]: 1: Hoare triple {17597#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,567 INFO L273 TraceCheckUtils]: 2: Hoare triple {17597#true} assume true; {17597#true} is VALID [2018-11-18 23:39:21,567 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {17597#true} {17597#true} #649#return; {17597#true} is VALID [2018-11-18 23:39:21,567 INFO L256 TraceCheckUtils]: 4: Hoare triple {17597#true} call #t~ret138 := main(); {17597#true} is VALID [2018-11-18 23:39:21,568 INFO L273 TraceCheckUtils]: 5: Hoare triple {17597#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,568 INFO L256 TraceCheckUtils]: 6: Hoare triple {17597#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {17597#true} is VALID [2018-11-18 23:39:21,568 INFO L273 TraceCheckUtils]: 7: Hoare triple {17597#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,568 INFO L273 TraceCheckUtils]: 8: Hoare triple {17597#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {17597#true} is VALID [2018-11-18 23:39:21,568 INFO L273 TraceCheckUtils]: 9: Hoare triple {17597#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 10: Hoare triple {17597#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 11: Hoare triple {17597#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 12: Hoare triple {17597#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 13: Hoare triple {17597#true} assume true; {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 14: Hoare triple {17597#true} assume !false; {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 15: Hoare triple {17597#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,569 INFO L273 TraceCheckUtils]: 16: Hoare triple {17597#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 17: Hoare triple {17597#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 18: Hoare triple {17597#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 19: Hoare triple {17597#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 20: Hoare triple {17597#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 21: Hoare triple {17597#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 22: Hoare triple {17597#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 23: Hoare triple {17597#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17597#true} is VALID [2018-11-18 23:39:21,570 INFO L273 TraceCheckUtils]: 24: Hoare triple {17597#true} assume 8464 == #t~mem32;havoc #t~mem32; {17597#true} is VALID [2018-11-18 23:39:21,571 INFO L273 TraceCheckUtils]: 25: Hoare triple {17597#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {17597#true} is VALID [2018-11-18 23:39:21,571 INFO L273 TraceCheckUtils]: 26: Hoare triple {17597#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {17597#true} is VALID [2018-11-18 23:39:21,571 INFO L273 TraceCheckUtils]: 27: Hoare triple {17597#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,572 INFO L273 TraceCheckUtils]: 28: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,572 INFO L273 TraceCheckUtils]: 29: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,572 INFO L273 TraceCheckUtils]: 30: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,573 INFO L273 TraceCheckUtils]: 31: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume true; {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,573 INFO L273 TraceCheckUtils]: 32: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,573 INFO L273 TraceCheckUtils]: 33: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,574 INFO L273 TraceCheckUtils]: 34: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,574 INFO L273 TraceCheckUtils]: 35: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,575 INFO L273 TraceCheckUtils]: 36: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-18 23:39:21,575 INFO L273 TraceCheckUtils]: 37: Hoare triple {17599#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17600#(= |ssl3_accept_#t~mem28| 8496)} is VALID [2018-11-18 23:39:21,576 INFO L273 TraceCheckUtils]: 38: Hoare triple {17600#(= |ssl3_accept_#t~mem28| 8496)} assume 8195 == #t~mem28;havoc #t~mem28; {17598#false} is VALID [2018-11-18 23:39:21,576 INFO L273 TraceCheckUtils]: 39: Hoare triple {17598#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,577 INFO L273 TraceCheckUtils]: 40: Hoare triple {17598#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {17598#false} is VALID [2018-11-18 23:39:21,577 INFO L273 TraceCheckUtils]: 41: Hoare triple {17598#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,577 INFO L273 TraceCheckUtils]: 42: Hoare triple {17598#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,577 INFO L273 TraceCheckUtils]: 43: Hoare triple {17598#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {17598#false} is VALID [2018-11-18 23:39:21,577 INFO L273 TraceCheckUtils]: 44: Hoare triple {17598#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,578 INFO L273 TraceCheckUtils]: 45: Hoare triple {17598#false} assume 12292 != #t~mem62;havoc #t~mem62; {17598#false} is VALID [2018-11-18 23:39:21,578 INFO L273 TraceCheckUtils]: 46: Hoare triple {17598#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {17598#false} is VALID [2018-11-18 23:39:21,578 INFO L273 TraceCheckUtils]: 47: Hoare triple {17598#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,578 INFO L273 TraceCheckUtils]: 48: Hoare triple {17598#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {17598#false} is VALID [2018-11-18 23:39:21,578 INFO L273 TraceCheckUtils]: 49: Hoare triple {17598#false} ~skip~0 := 0; {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 50: Hoare triple {17598#false} assume true; {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 51: Hoare triple {17598#false} assume !false; {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 52: Hoare triple {17598#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 53: Hoare triple {17598#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 54: Hoare triple {17598#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 55: Hoare triple {17598#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,579 INFO L273 TraceCheckUtils]: 56: Hoare triple {17598#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 57: Hoare triple {17598#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 58: Hoare triple {17598#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 59: Hoare triple {17598#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 60: Hoare triple {17598#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 61: Hoare triple {17598#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 62: Hoare triple {17598#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 63: Hoare triple {17598#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 64: Hoare triple {17598#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,580 INFO L273 TraceCheckUtils]: 65: Hoare triple {17598#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 66: Hoare triple {17598#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 67: Hoare triple {17598#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 68: Hoare triple {17598#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 69: Hoare triple {17598#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 70: Hoare triple {17598#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 71: Hoare triple {17598#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 72: Hoare triple {17598#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,581 INFO L273 TraceCheckUtils]: 73: Hoare triple {17598#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 74: Hoare triple {17598#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 75: Hoare triple {17598#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 76: Hoare triple {17598#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 77: Hoare triple {17598#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 78: Hoare triple {17598#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 79: Hoare triple {17598#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 80: Hoare triple {17598#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 81: Hoare triple {17598#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,582 INFO L273 TraceCheckUtils]: 82: Hoare triple {17598#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,583 INFO L273 TraceCheckUtils]: 83: Hoare triple {17598#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,583 INFO L273 TraceCheckUtils]: 84: Hoare triple {17598#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {17598#false} is VALID [2018-11-18 23:39:21,583 INFO L273 TraceCheckUtils]: 85: Hoare triple {17598#false} assume 8672 == #t~mem56;havoc #t~mem56; {17598#false} is VALID [2018-11-18 23:39:21,583 INFO L273 TraceCheckUtils]: 86: Hoare triple {17598#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {17598#false} is VALID [2018-11-18 23:39:21,583 INFO L273 TraceCheckUtils]: 87: Hoare triple {17598#false} assume 3 == ~blastFlag~0; {17598#false} is VALID [2018-11-18 23:39:21,583 INFO L273 TraceCheckUtils]: 88: Hoare triple {17598#false} assume !false; {17598#false} is VALID [2018-11-18 23:39:21,588 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:21,588 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:21,588 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 23:39:21,588 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 89 [2018-11-18 23:39:21,589 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:21,589 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-18 23:39:21,678 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:21,678 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 23:39:21,679 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 23:39:21,679 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 23:39:21,679 INFO L87 Difference]: Start difference. First operand 198 states and 287 transitions. Second operand 4 states. [2018-11-18 23:39:23,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:23,953 INFO L93 Difference]: Finished difference Result 387 states and 567 transitions. [2018-11-18 23:39:23,953 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 23:39:23,953 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 89 [2018-11-18 23:39:23,954 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:23,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:23,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 446 transitions. [2018-11-18 23:39:23,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-18 23:39:23,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 446 transitions. [2018-11-18 23:39:23,959 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 446 transitions. [2018-11-18 23:39:24,374 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 446 edges. 446 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:24,378 INFO L225 Difference]: With dead ends: 387 [2018-11-18 23:39:24,379 INFO L226 Difference]: Without dead ends: 215 [2018-11-18 23:39:24,379 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 23:39:24,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215 states. [2018-11-18 23:39:24,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215 to 198. [2018-11-18 23:39:24,403 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:24,403 INFO L82 GeneralOperation]: Start isEquivalent. First operand 215 states. Second operand 198 states. [2018-11-18 23:39:24,403 INFO L74 IsIncluded]: Start isIncluded. First operand 215 states. Second operand 198 states. [2018-11-18 23:39:24,403 INFO L87 Difference]: Start difference. First operand 215 states. Second operand 198 states. [2018-11-18 23:39:24,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:24,408 INFO L93 Difference]: Finished difference Result 215 states and 308 transitions. [2018-11-18 23:39:24,408 INFO L276 IsEmpty]: Start isEmpty. Operand 215 states and 308 transitions. [2018-11-18 23:39:24,409 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:24,409 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:24,409 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 215 states. [2018-11-18 23:39:24,409 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 215 states. [2018-11-18 23:39:24,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:24,413 INFO L93 Difference]: Finished difference Result 215 states and 308 transitions. [2018-11-18 23:39:24,413 INFO L276 IsEmpty]: Start isEmpty. Operand 215 states and 308 transitions. [2018-11-18 23:39:24,414 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:24,414 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:24,414 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:24,414 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:24,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2018-11-18 23:39:24,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 286 transitions. [2018-11-18 23:39:24,418 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 286 transitions. Word has length 89 [2018-11-18 23:39:24,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:24,419 INFO L480 AbstractCegarLoop]: Abstraction has 198 states and 286 transitions. [2018-11-18 23:39:24,419 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 23:39:24,419 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 286 transitions. [2018-11-18 23:39:24,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-18 23:39:24,419 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:24,420 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:24,420 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:24,420 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:24,420 INFO L82 PathProgramCache]: Analyzing trace with hash 474678458, now seen corresponding path program 1 times [2018-11-18 23:39:24,420 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:24,421 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:24,421 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:24,422 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:24,422 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:24,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:24,659 INFO L256 TraceCheckUtils]: 0: Hoare triple {18722#true} call ULTIMATE.init(); {18722#true} is VALID [2018-11-18 23:39:24,659 INFO L273 TraceCheckUtils]: 1: Hoare triple {18722#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,660 INFO L273 TraceCheckUtils]: 2: Hoare triple {18722#true} assume true; {18722#true} is VALID [2018-11-18 23:39:24,660 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18722#true} {18722#true} #649#return; {18722#true} is VALID [2018-11-18 23:39:24,660 INFO L256 TraceCheckUtils]: 4: Hoare triple {18722#true} call #t~ret138 := main(); {18722#true} is VALID [2018-11-18 23:39:24,660 INFO L273 TraceCheckUtils]: 5: Hoare triple {18722#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,660 INFO L256 TraceCheckUtils]: 6: Hoare triple {18722#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {18722#true} is VALID [2018-11-18 23:39:24,661 INFO L273 TraceCheckUtils]: 7: Hoare triple {18722#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,661 INFO L273 TraceCheckUtils]: 8: Hoare triple {18722#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {18722#true} is VALID [2018-11-18 23:39:24,661 INFO L273 TraceCheckUtils]: 9: Hoare triple {18722#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {18722#true} is VALID [2018-11-18 23:39:24,661 INFO L273 TraceCheckUtils]: 10: Hoare triple {18722#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {18722#true} is VALID [2018-11-18 23:39:24,661 INFO L273 TraceCheckUtils]: 11: Hoare triple {18722#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,662 INFO L273 TraceCheckUtils]: 12: Hoare triple {18722#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {18722#true} is VALID [2018-11-18 23:39:24,662 INFO L273 TraceCheckUtils]: 13: Hoare triple {18722#true} assume true; {18722#true} is VALID [2018-11-18 23:39:24,662 INFO L273 TraceCheckUtils]: 14: Hoare triple {18722#true} assume !false; {18722#true} is VALID [2018-11-18 23:39:24,662 INFO L273 TraceCheckUtils]: 15: Hoare triple {18722#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,662 INFO L273 TraceCheckUtils]: 16: Hoare triple {18722#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,663 INFO L273 TraceCheckUtils]: 17: Hoare triple {18722#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,663 INFO L273 TraceCheckUtils]: 18: Hoare triple {18722#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,663 INFO L273 TraceCheckUtils]: 19: Hoare triple {18722#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,663 INFO L273 TraceCheckUtils]: 20: Hoare triple {18722#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,663 INFO L273 TraceCheckUtils]: 21: Hoare triple {18722#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,664 INFO L273 TraceCheckUtils]: 22: Hoare triple {18722#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,664 INFO L273 TraceCheckUtils]: 23: Hoare triple {18722#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18722#true} is VALID [2018-11-18 23:39:24,664 INFO L273 TraceCheckUtils]: 24: Hoare triple {18722#true} assume 8464 == #t~mem32;havoc #t~mem32; {18722#true} is VALID [2018-11-18 23:39:24,664 INFO L273 TraceCheckUtils]: 25: Hoare triple {18722#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {18722#true} is VALID [2018-11-18 23:39:24,681 INFO L273 TraceCheckUtils]: 26: Hoare triple {18722#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,690 INFO L273 TraceCheckUtils]: 27: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,702 INFO L273 TraceCheckUtils]: 28: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,715 INFO L273 TraceCheckUtils]: 29: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,724 INFO L273 TraceCheckUtils]: 30: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} ~skip~0 := 0; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,742 INFO L273 TraceCheckUtils]: 31: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume true; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,751 INFO L273 TraceCheckUtils]: 32: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !false; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,763 INFO L273 TraceCheckUtils]: 33: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,776 INFO L273 TraceCheckUtils]: 34: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,789 INFO L273 TraceCheckUtils]: 35: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,806 INFO L273 TraceCheckUtils]: 36: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,815 INFO L273 TraceCheckUtils]: 37: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,827 INFO L273 TraceCheckUtils]: 38: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,840 INFO L273 TraceCheckUtils]: 39: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,853 INFO L273 TraceCheckUtils]: 40: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,868 INFO L273 TraceCheckUtils]: 41: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,877 INFO L273 TraceCheckUtils]: 42: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,889 INFO L273 TraceCheckUtils]: 43: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,902 INFO L273 TraceCheckUtils]: 44: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,915 INFO L273 TraceCheckUtils]: 45: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume 8496 == #t~mem35;havoc #t~mem35; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,928 INFO L273 TraceCheckUtils]: 46: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {18724#(= ssl3_accept_~blastFlag~0 1)} is VALID [2018-11-18 23:39:24,940 INFO L273 TraceCheckUtils]: 47: Hoare triple {18724#(= ssl3_accept_~blastFlag~0 1)} assume !(1 == ~blastFlag~0); {18723#false} is VALID [2018-11-18 23:39:24,941 INFO L273 TraceCheckUtils]: 48: Hoare triple {18723#false} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,941 INFO L273 TraceCheckUtils]: 49: Hoare triple {18723#false} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,941 INFO L273 TraceCheckUtils]: 50: Hoare triple {18723#false} call write~int(0, ~s.base, 64 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,941 INFO L273 TraceCheckUtils]: 51: Hoare triple {18723#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,941 INFO L273 TraceCheckUtils]: 52: Hoare triple {18723#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18723#false} is VALID [2018-11-18 23:39:24,942 INFO L273 TraceCheckUtils]: 53: Hoare triple {18723#false} ~skip~0 := 0; {18723#false} is VALID [2018-11-18 23:39:24,942 INFO L273 TraceCheckUtils]: 54: Hoare triple {18723#false} assume true; {18723#false} is VALID [2018-11-18 23:39:24,942 INFO L273 TraceCheckUtils]: 55: Hoare triple {18723#false} assume !false; {18723#false} is VALID [2018-11-18 23:39:24,942 INFO L273 TraceCheckUtils]: 56: Hoare triple {18723#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,942 INFO L273 TraceCheckUtils]: 57: Hoare triple {18723#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,942 INFO L273 TraceCheckUtils]: 58: Hoare triple {18723#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,943 INFO L273 TraceCheckUtils]: 59: Hoare triple {18723#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,943 INFO L273 TraceCheckUtils]: 60: Hoare triple {18723#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,943 INFO L273 TraceCheckUtils]: 61: Hoare triple {18723#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,943 INFO L273 TraceCheckUtils]: 62: Hoare triple {18723#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,943 INFO L273 TraceCheckUtils]: 63: Hoare triple {18723#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,943 INFO L273 TraceCheckUtils]: 64: Hoare triple {18723#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,944 INFO L273 TraceCheckUtils]: 65: Hoare triple {18723#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,944 INFO L273 TraceCheckUtils]: 66: Hoare triple {18723#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,944 INFO L273 TraceCheckUtils]: 67: Hoare triple {18723#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,944 INFO L273 TraceCheckUtils]: 68: Hoare triple {18723#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,944 INFO L273 TraceCheckUtils]: 69: Hoare triple {18723#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,944 INFO L273 TraceCheckUtils]: 70: Hoare triple {18723#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,945 INFO L273 TraceCheckUtils]: 71: Hoare triple {18723#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,945 INFO L273 TraceCheckUtils]: 72: Hoare triple {18723#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,945 INFO L273 TraceCheckUtils]: 73: Hoare triple {18723#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,945 INFO L273 TraceCheckUtils]: 74: Hoare triple {18723#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,945 INFO L273 TraceCheckUtils]: 75: Hoare triple {18723#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,945 INFO L273 TraceCheckUtils]: 76: Hoare triple {18723#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,946 INFO L273 TraceCheckUtils]: 77: Hoare triple {18723#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,946 INFO L273 TraceCheckUtils]: 78: Hoare triple {18723#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,946 INFO L273 TraceCheckUtils]: 79: Hoare triple {18723#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,946 INFO L273 TraceCheckUtils]: 80: Hoare triple {18723#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,946 INFO L273 TraceCheckUtils]: 81: Hoare triple {18723#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,946 INFO L273 TraceCheckUtils]: 82: Hoare triple {18723#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,947 INFO L273 TraceCheckUtils]: 83: Hoare triple {18723#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,947 INFO L273 TraceCheckUtils]: 84: Hoare triple {18723#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,947 INFO L273 TraceCheckUtils]: 85: Hoare triple {18723#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,947 INFO L273 TraceCheckUtils]: 86: Hoare triple {18723#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,947 INFO L273 TraceCheckUtils]: 87: Hoare triple {18723#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,948 INFO L273 TraceCheckUtils]: 88: Hoare triple {18723#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {18723#false} is VALID [2018-11-18 23:39:24,948 INFO L273 TraceCheckUtils]: 89: Hoare triple {18723#false} assume 8672 == #t~mem56;havoc #t~mem56; {18723#false} is VALID [2018-11-18 23:39:24,948 INFO L273 TraceCheckUtils]: 90: Hoare triple {18723#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {18723#false} is VALID [2018-11-18 23:39:24,948 INFO L273 TraceCheckUtils]: 91: Hoare triple {18723#false} assume 3 == ~blastFlag~0; {18723#false} is VALID [2018-11-18 23:39:24,948 INFO L273 TraceCheckUtils]: 92: Hoare triple {18723#false} assume !false; {18723#false} is VALID [2018-11-18 23:39:24,954 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 23:39:24,954 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:24,954 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:39:24,955 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 93 [2018-11-18 23:39:24,955 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:24,955 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:39:25,073 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:25,074 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:39:25,074 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:39:25,074 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:39:25,074 INFO L87 Difference]: Start difference. First operand 198 states and 286 transitions. Second operand 3 states. [2018-11-18 23:39:26,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:26,406 INFO L93 Difference]: Finished difference Result 537 states and 795 transitions. [2018-11-18 23:39:26,406 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:39:26,406 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 93 [2018-11-18 23:39:26,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:26,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:39:26,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 573 transitions. [2018-11-18 23:39:26,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:39:26,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 573 transitions. [2018-11-18 23:39:26,411 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 573 transitions. [2018-11-18 23:39:26,965 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 573 edges. 573 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:26,976 INFO L225 Difference]: With dead ends: 537 [2018-11-18 23:39:26,976 INFO L226 Difference]: Without dead ends: 365 [2018-11-18 23:39:26,976 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:39:26,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 365 states. [2018-11-18 23:39:27,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 365 to 365. [2018-11-18 23:39:27,054 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:27,055 INFO L82 GeneralOperation]: Start isEquivalent. First operand 365 states. Second operand 365 states. [2018-11-18 23:39:27,055 INFO L74 IsIncluded]: Start isIncluded. First operand 365 states. Second operand 365 states. [2018-11-18 23:39:27,055 INFO L87 Difference]: Start difference. First operand 365 states. Second operand 365 states. [2018-11-18 23:39:27,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:27,063 INFO L93 Difference]: Finished difference Result 365 states and 533 transitions. [2018-11-18 23:39:27,063 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 533 transitions. [2018-11-18 23:39:27,064 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:27,064 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:27,064 INFO L74 IsIncluded]: Start isIncluded. First operand 365 states. Second operand 365 states. [2018-11-18 23:39:27,064 INFO L87 Difference]: Start difference. First operand 365 states. Second operand 365 states. [2018-11-18 23:39:27,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:27,073 INFO L93 Difference]: Finished difference Result 365 states and 533 transitions. [2018-11-18 23:39:27,073 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 533 transitions. [2018-11-18 23:39:27,073 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:27,073 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:27,074 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:27,074 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:27,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 365 states. [2018-11-18 23:39:27,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 533 transitions. [2018-11-18 23:39:27,082 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 533 transitions. Word has length 93 [2018-11-18 23:39:27,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:27,083 INFO L480 AbstractCegarLoop]: Abstraction has 365 states and 533 transitions. [2018-11-18 23:39:27,083 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:39:27,083 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 533 transitions. [2018-11-18 23:39:27,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-18 23:39:27,083 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:27,084 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:27,084 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:27,084 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:27,084 INFO L82 PathProgramCache]: Analyzing trace with hash -1453594244, now seen corresponding path program 1 times [2018-11-18 23:39:27,084 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:27,084 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:27,085 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:27,085 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:27,085 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:27,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 23:39:27,205 INFO L256 TraceCheckUtils]: 0: Hoare triple {20511#true} call ULTIMATE.init(); {20511#true} is VALID [2018-11-18 23:39:27,205 INFO L273 TraceCheckUtils]: 1: Hoare triple {20511#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4);call write~unchecked~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,205 INFO L273 TraceCheckUtils]: 2: Hoare triple {20511#true} assume true; {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20511#true} {20511#true} #649#return; {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L256 TraceCheckUtils]: 4: Hoare triple {20511#true} call #t~ret138 := main(); {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L273 TraceCheckUtils]: 5: Hoare triple {20511#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L256 TraceCheckUtils]: 6: Hoare triple {20511#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L273 TraceCheckUtils]: 7: Hoare triple {20511#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L273 TraceCheckUtils]: 8: Hoare triple {20511#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {20511#true} is VALID [2018-11-18 23:39:27,206 INFO L273 TraceCheckUtils]: 9: Hoare triple {20511#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 10: Hoare triple {20511#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 11: Hoare triple {20511#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 12: Hoare triple {20511#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 13: Hoare triple {20511#true} assume true; {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 14: Hoare triple {20511#true} assume !false; {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 15: Hoare triple {20511#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 16: Hoare triple {20511#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 17: Hoare triple {20511#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,207 INFO L273 TraceCheckUtils]: 18: Hoare triple {20511#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 19: Hoare triple {20511#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 20: Hoare triple {20511#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 21: Hoare triple {20511#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 22: Hoare triple {20511#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 23: Hoare triple {20511#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 24: Hoare triple {20511#true} assume 8464 == #t~mem32;havoc #t~mem32; {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 25: Hoare triple {20511#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {20511#true} is VALID [2018-11-18 23:39:27,208 INFO L273 TraceCheckUtils]: 26: Hoare triple {20511#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 27: Hoare triple {20511#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 28: Hoare triple {20511#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 29: Hoare triple {20511#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 30: Hoare triple {20511#true} ~skip~0 := 0; {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 31: Hoare triple {20511#true} assume true; {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 32: Hoare triple {20511#true} assume !false; {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 33: Hoare triple {20511#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 34: Hoare triple {20511#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,209 INFO L273 TraceCheckUtils]: 35: Hoare triple {20511#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 36: Hoare triple {20511#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 37: Hoare triple {20511#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 38: Hoare triple {20511#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 39: Hoare triple {20511#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 40: Hoare triple {20511#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 41: Hoare triple {20511#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 42: Hoare triple {20511#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,210 INFO L273 TraceCheckUtils]: 43: Hoare triple {20511#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,211 INFO L273 TraceCheckUtils]: 44: Hoare triple {20511#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20511#true} is VALID [2018-11-18 23:39:27,211 INFO L273 TraceCheckUtils]: 45: Hoare triple {20511#true} assume 8496 == #t~mem35;havoc #t~mem35; {20511#true} is VALID [2018-11-18 23:39:27,211 INFO L273 TraceCheckUtils]: 46: Hoare triple {20511#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {20511#true} is VALID [2018-11-18 23:39:27,211 INFO L273 TraceCheckUtils]: 47: Hoare triple {20511#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,212 INFO L273 TraceCheckUtils]: 48: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,213 INFO L273 TraceCheckUtils]: 49: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,213 INFO L273 TraceCheckUtils]: 50: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,216 INFO L273 TraceCheckUtils]: 51: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,216 INFO L273 TraceCheckUtils]: 52: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,218 INFO L273 TraceCheckUtils]: 53: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,218 INFO L273 TraceCheckUtils]: 54: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume true; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,221 INFO L273 TraceCheckUtils]: 55: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,221 INFO L273 TraceCheckUtils]: 56: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,223 INFO L273 TraceCheckUtils]: 57: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,223 INFO L273 TraceCheckUtils]: 58: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,225 INFO L273 TraceCheckUtils]: 59: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,225 INFO L273 TraceCheckUtils]: 60: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,225 INFO L273 TraceCheckUtils]: 61: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,226 INFO L273 TraceCheckUtils]: 62: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,226 INFO L273 TraceCheckUtils]: 63: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,226 INFO L273 TraceCheckUtils]: 64: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,226 INFO L273 TraceCheckUtils]: 65: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,227 INFO L273 TraceCheckUtils]: 66: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,227 INFO L273 TraceCheckUtils]: 67: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,227 INFO L273 TraceCheckUtils]: 68: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,228 INFO L273 TraceCheckUtils]: 69: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,228 INFO L273 TraceCheckUtils]: 70: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,228 INFO L273 TraceCheckUtils]: 71: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,229 INFO L273 TraceCheckUtils]: 72: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,229 INFO L273 TraceCheckUtils]: 73: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,230 INFO L273 TraceCheckUtils]: 74: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,230 INFO L273 TraceCheckUtils]: 75: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,231 INFO L273 TraceCheckUtils]: 76: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,231 INFO L273 TraceCheckUtils]: 77: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,232 INFO L273 TraceCheckUtils]: 78: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,232 INFO L273 TraceCheckUtils]: 79: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,233 INFO L273 TraceCheckUtils]: 80: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,233 INFO L273 TraceCheckUtils]: 81: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,234 INFO L273 TraceCheckUtils]: 82: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,234 INFO L273 TraceCheckUtils]: 83: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,235 INFO L273 TraceCheckUtils]: 84: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,235 INFO L273 TraceCheckUtils]: 85: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,236 INFO L273 TraceCheckUtils]: 86: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,236 INFO L273 TraceCheckUtils]: 87: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,237 INFO L273 TraceCheckUtils]: 88: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,237 INFO L273 TraceCheckUtils]: 89: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume 8672 == #t~mem56;havoc #t~mem56; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,238 INFO L273 TraceCheckUtils]: 90: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {20513#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-18 23:39:27,239 INFO L273 TraceCheckUtils]: 91: Hoare triple {20513#(<= ssl3_accept_~blastFlag~0 2)} assume 3 == ~blastFlag~0; {20512#false} is VALID [2018-11-18 23:39:27,239 INFO L273 TraceCheckUtils]: 92: Hoare triple {20512#false} assume !false; {20512#false} is VALID [2018-11-18 23:39:27,246 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-18 23:39:27,246 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 23:39:27,246 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 23:39:27,246 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 93 [2018-11-18 23:39:27,247 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-18 23:39:27,247 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-18 23:39:27,325 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:27,325 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 23:39:27,325 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 23:39:27,325 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:39:27,326 INFO L87 Difference]: Start difference. First operand 365 states and 533 transitions. Second operand 3 states. [2018-11-18 23:39:28,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:28,735 INFO L93 Difference]: Finished difference Result 874 states and 1293 transitions. [2018-11-18 23:39:28,735 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 23:39:28,735 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 93 [2018-11-18 23:39:28,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 23:39:28,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:39:28,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 577 transitions. [2018-11-18 23:39:28,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-18 23:39:28,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 577 transitions. [2018-11-18 23:39:28,740 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 577 transitions. [2018-11-18 23:39:29,282 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 577 edges. 577 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-18 23:39:29,297 INFO L225 Difference]: With dead ends: 874 [2018-11-18 23:39:29,298 INFO L226 Difference]: Without dead ends: 535 [2018-11-18 23:39:29,299 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 23:39:29,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-18 23:39:29,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 535. [2018-11-18 23:39:29,442 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-18 23:39:29,442 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 535 states. [2018-11-18 23:39:29,443 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 535 states. [2018-11-18 23:39:29,443 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 535 states. [2018-11-18 23:39:29,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:29,459 INFO L93 Difference]: Finished difference Result 535 states and 787 transitions. [2018-11-18 23:39:29,460 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 787 transitions. [2018-11-18 23:39:29,461 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:29,461 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:29,461 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 535 states. [2018-11-18 23:39:29,461 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 535 states. [2018-11-18 23:39:29,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 23:39:29,478 INFO L93 Difference]: Finished difference Result 535 states and 787 transitions. [2018-11-18 23:39:29,478 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 787 transitions. [2018-11-18 23:39:29,479 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-18 23:39:29,480 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-18 23:39:29,480 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-18 23:39:29,480 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-18 23:39:29,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 535 states. [2018-11-18 23:39:29,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 535 states to 535 states and 787 transitions. [2018-11-18 23:39:29,496 INFO L78 Accepts]: Start accepts. Automaton has 535 states and 787 transitions. Word has length 93 [2018-11-18 23:39:29,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 23:39:29,496 INFO L480 AbstractCegarLoop]: Abstraction has 535 states and 787 transitions. [2018-11-18 23:39:29,496 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 23:39:29,497 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 787 transitions. [2018-11-18 23:39:29,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2018-11-18 23:39:29,498 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 23:39:29,498 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 23:39:29,498 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 23:39:29,498 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 23:39:29,498 INFO L82 PathProgramCache]: Analyzing trace with hash 1559568529, now seen corresponding path program 1 times [2018-11-18 23:39:29,498 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 23:39:29,498 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 23:39:29,499 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:29,499 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 23:39:29,499 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 23:39:29,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 23:39:29,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 23:39:29,871 INFO L442 BasicCegarLoop]: Counterexample might be feasible [2018-11-18 23:39:29,964 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24585 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-18 23:39:29,965 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-18 23:39:30,078 WARN L170 areAnnotationChecker]: SSLv3_server_methodENTRY has no Hoare annotation [2018-11-18 23:39:30,078 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-18 23:39:30,078 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-18 23:39:30,078 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: #Ultimate.C_memcpyENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: sslv3_base_methodENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: #Ultimate.meminitENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: ssl3_acceptENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: ssl3_get_server_methodENTRY has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: L1049 has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: L1049 has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-18 23:39:30,079 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L-1-1 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L-1-1 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L1713 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L1713 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: #Ultimate.meminitFINAL has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-18 23:39:30,080 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1032 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1032 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1051 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1051 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1049-2 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1075-1 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: #Ultimate.C_memcpyFINAL has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1713-1 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: #Ultimate.meminitEXIT has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1115-2 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1034 has no Hoare annotation [2018-11-18 23:39:30,081 WARN L170 areAnnotationChecker]: L1034 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: ssl3_get_server_methodFINAL has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1051-1 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: SSLv3_server_methodFINAL has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: #Ultimate.C_memcpyEXIT has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: sslv3_base_methodFINAL has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1034-1 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1053 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1053 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: SSLv3_server_methodEXIT has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: L1053-1 has no Hoare annotation [2018-11-18 23:39:30,082 WARN L170 areAnnotationChecker]: sslv3_base_methodEXIT has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1121-1 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: ssl3_acceptFINAL has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1136-3 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1136-3 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: ssl3_acceptEXIT has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1136-1 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1136-1 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1693 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1137 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1697 has no Hoare annotation [2018-11-18 23:39:30,083 WARN L170 areAnnotationChecker]: L1697 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1697-2 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1140 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1249 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1254-2 has no Hoare annotation [2018-11-18 23:39:30,084 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-18 23:39:30,085 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1624 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1161 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1662 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1662 has no Hoare annotation [2018-11-18 23:39:30,086 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1663 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1663 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1662-1 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1664 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1664 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-18 23:39:30,087 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1666 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1666 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1664-2 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1664-2 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1675 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1675 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-18 23:39:30,088 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1352-2 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1361-2 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1188 has no Hoare annotation [2018-11-18 23:39:30,089 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1377-2 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1423 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1423 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-18 23:39:30,090 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1399 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1385 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1385 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1424 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1424 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1401 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1401 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1388 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1388 has no Hoare annotation [2018-11-18 23:39:30,091 WARN L170 areAnnotationChecker]: L1425 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1425 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1433 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1465 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1465 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1388-1 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-18 23:39:30,092 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1392 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1392 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1443 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1478 has no Hoare annotation [2018-11-18 23:39:30,093 WARN L170 areAnnotationChecker]: L1478 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1475-1 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1209 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1446 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1446 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1393-2 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1393-2 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1498 has no Hoare annotation [2018-11-18 23:39:30,094 WARN L170 areAnnotationChecker]: L1498 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1215 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1502 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1502 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1514 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1514 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1221 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1525 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1525 has no Hoare annotation [2018-11-18 23:39:30,095 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1536 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1536 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1536-2 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1536-2 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1233 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-18 23:39:30,096 WARN L170 areAnnotationChecker]: L1546 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1546 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1556 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1556 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1546-2 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1563 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1563 has no Hoare annotation [2018-11-18 23:39:30,097 WARN L170 areAnnotationChecker]: L1239 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1563-2 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1563-2 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1585 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1585 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1575 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1575 has no Hoare annotation [2018-11-18 23:39:30,098 WARN L170 areAnnotationChecker]: L1586 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1586 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1590 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1590 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1242 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1245 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1596 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1596 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1606 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1606 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1596-2 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1610 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1610 has no Hoare annotation [2018-11-18 23:39:30,099 WARN L170 areAnnotationChecker]: L1606-1 has no Hoare annotation [2018-11-18 23:39:30,099 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-18 23:39:30,102 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 11:39:30 BoogieIcfgContainer [2018-11-18 23:39:30,102 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-18 23:39:30,103 INFO L168 Benchmark]: Toolchain (without parser) took 78672.21 ms. Allocated memory was 1.5 GB in the beginning and 2.8 GB in the end (delta: 1.2 GB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -799.1 MB). Peak memory consumption was 413.0 MB. Max. memory is 7.1 GB. [2018-11-18 23:39:30,104 INFO L168 Benchmark]: CDTParser took 0.23 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-18 23:39:30,105 INFO L168 Benchmark]: CACSL2BoogieTranslator took 980.13 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 746.1 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -780.5 MB). Peak memory consumption was 51.6 MB. Max. memory is 7.1 GB. [2018-11-18 23:39:30,105 INFO L168 Benchmark]: Boogie Preprocessor took 204.85 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-18 23:39:30,106 INFO L168 Benchmark]: RCFGBuilder took 4004.35 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 169.4 MB). Peak memory consumption was 169.4 MB. Max. memory is 7.1 GB. [2018-11-18 23:39:30,106 INFO L168 Benchmark]: TraceAbstraction took 73478.05 ms. Allocated memory was 2.3 GB in the beginning and 2.8 GB in the end (delta: 466.1 MB). Free memory was 2.0 GB in the beginning and 2.2 GB in the end (delta: -188.1 MB). Peak memory consumption was 278.0 MB. Max. memory is 7.1 GB. [2018-11-18 23:39:30,110 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 980.13 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 746.1 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -780.5 MB). Peak memory consumption was 51.6 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 204.85 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 4004.35 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 169.4 MB). Peak memory consumption was 169.4 MB. Max. memory is 7.1 GB. * TraceAbstraction took 73478.05 ms. Allocated memory was 2.3 GB in the beginning and 2.8 GB in the end (delta: 466.1 MB). Free memory was 2.0 GB in the beginning and 2.2 GB in the end (delta: -188.1 MB). Peak memory consumption was 278.0 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24585 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1703]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1121. Possible FailurePath: [L1042] static int init = 1; [L1043] FCALL static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24583, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24586:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] EXPR, FCALL malloc(sizeof(SSL)) [L1070] s = malloc(sizeof(SSL)) [L1071] EXPR, FCALL malloc(sizeof(struct ssl3_state_st)) [L1071] FCALL s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] EXPR, FCALL malloc(sizeof(SSL_CTX)) [L1072] FCALL s->ctx = malloc(sizeof(SSL_CTX)) [L1073] EXPR, FCALL malloc(sizeof(SSL_SESSION)) [L1073] FCALL s->session = malloc(sizeof(SSL_SESSION)) [L1074] FCALL s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24578:0}, malloc(sizeof(SSL_CTX))={24584:0}, malloc(sizeof(SSL_SESSION))={24580:0}, malloc(sizeof(struct ssl3_state_st))={24589:0}, s={24578:0}, SSLv3_server_data={24586:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24578:0}, SSLv3_server_data={24586:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] FCALL s->hit=__VERIFIER_nondet_int () [L1108] FCALL s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR, FCALL s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24586:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR, FCALL s->info_callback [L1116] cb = s->info_callback [L1120] EXPR, FCALL s->in_handshake [L1120] FCALL s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR, FCALL s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24586:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24578:0}, s={24578:0}, s->state=8464, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] FCALL s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] FCALL s->state = 8496 [L1337] FCALL s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1662] EXPR, FCALL s->s3 [L1662] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24579, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->s3={24589:0}, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1662] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1691] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8496, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1347] COND FALSE !(ret <= 0) [L1352] FCALL s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->hit=1, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1352] COND TRUE s->hit [L1353] FCALL s->state = 8656 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1357] FCALL s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1662] EXPR, FCALL s->s3 [L1662] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24579, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->s3={24589:0}, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1662] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1691] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8656, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1555] EXPR, FCALL s->session [L1555] EXPR, FCALL s->s3 [L1555] EXPR, FCALL (s->s3)->tmp.new_cipher [L1555] FCALL (s->session)->cipher = (s->s3)->tmp.new_cipher [L1556] COND FALSE !(! tmp___9) [L1562] ret = __VERIFIER_nondet_int() [L1563] COND TRUE blastFlag == 2 [L1564] blastFlag = 3 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1568] COND FALSE !(ret <= 0) [L1573] FCALL s->state = 8672 [L1574] FCALL s->init_num = 0 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1575] COND FALSE !(! tmp___10) VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1662] EXPR, FCALL s->s3 [L1662] EXPR, FCALL (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24579, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->s3={24589:0}, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1662] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1691] skip = 0 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR, FCALL s->state [L1138] state = s->state [L1139] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR, FCALL s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24578:0}, s={24578:0}, s->state=8672, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1584] ret = __VERIFIER_nondet_int() [L1585] COND TRUE blastFlag == 3 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1703] __VERIFIER_error() VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={24578:0}, s={24578:0}, skip=0, SSLv3_server_data={24586:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 182 locations, 1 error locations. UNSAFE Result, 73.3s OverallTime, 22 OverallIterations, 4 TraceHistogramMax, 59.8s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 4152 SDtfs, 841 SDslu, 6047 SDs, 0 SdLazy, 2934 SolverSat, 123 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 6.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 132 GetRequests, 42 SyntacticMatches, 30 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=535occurred in iteration=21, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.9s AutomataMinimizationTime, 21 MinimizatonAttempts, 312 StatesRemovedByMinimization, 18 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 7.8s InterpolantComputationTime, 1759 NumberOfCodeBlocks, 1759 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1603 ConstructedInterpolants, 0 QuantifiedInterpolants, 355518 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 21 InterpolantComputations, 21 PerfectInterpolantSequences, 419/419 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...