java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 10:57:25,408 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 10:57:25,410 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 10:57:25,427 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 10:57:25,427 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 10:57:25,430 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 10:57:25,432 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 10:57:25,434 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 10:57:25,437 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 10:57:25,439 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 10:57:25,440 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 10:57:25,442 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 10:57:25,443 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 10:57:25,445 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 10:57:25,446 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 10:57:25,446 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 10:57:25,449 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 10:57:25,461 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 10:57:25,463 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 10:57:25,468 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 10:57:25,469 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 10:57:25,471 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 10:57:25,474 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 10:57:25,474 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 10:57:25,474 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 10:57:25,479 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 10:57:25,480 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 10:57:25,480 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 10:57:25,483 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 10:57:25,484 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 10:57:25,484 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 10:57:25,485 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 10:57:25,485 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 10:57:25,485 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 10:57:25,488 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 10:57:25,491 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 10:57:25,491 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf [2018-11-23 10:57:25,519 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 10:57:25,522 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 10:57:25,523 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 10:57:25,523 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 10:57:25,524 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 10:57:25,524 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 10:57:25,525 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 10:57:25,525 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 10:57:25,525 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 10:57:25,525 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 10:57:25,525 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 10:57:25,527 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 10:57:25,527 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 10:57:25,527 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 10:57:25,527 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 10:57:25,527 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 10:57:25,528 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 10:57:25,528 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 10:57:25,528 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 10:57:25,528 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 10:57:25,529 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 10:57:25,529 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 10:57:25,529 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 10:57:25,529 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 10:57:25,529 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 10:57:25,530 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 10:57:25,530 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 10:57:25,530 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 10:57:25,530 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 10:57:25,530 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 10:57:25,531 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 10:57:25,531 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 10:57:25,531 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 10:57:25,577 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 10:57:25,598 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 10:57:25,603 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 10:57:25,605 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 10:57:25,605 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 10:57:25,606 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 10:57:25,681 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/13c6902e6/910c41a37b8b4b2e8bba491efee1f91c/FLAG23e7b786f [2018-11-23 10:57:26,233 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 10:57:26,234 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 10:57:26,258 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/13c6902e6/910c41a37b8b4b2e8bba491efee1f91c/FLAG23e7b786f [2018-11-23 10:57:26,459 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/13c6902e6/910c41a37b8b4b2e8bba491efee1f91c [2018-11-23 10:57:26,469 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 10:57:26,470 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 10:57:26,471 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 10:57:26,472 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 10:57:26,475 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 10:57:26,477 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 10:57:26" (1/1) ... [2018-11-23 10:57:26,480 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@61ac9026 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:26, skipping insertion in model container [2018-11-23 10:57:26,480 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 10:57:26" (1/1) ... [2018-11-23 10:57:26,490 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 10:57:26,575 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 10:57:27,162 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 10:57:27,189 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 10:57:27,519 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 10:57:27,552 INFO L195 MainTranslator]: Completed translation [2018-11-23 10:57:27,553 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27 WrapperNode [2018-11-23 10:57:27,553 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 10:57:27,554 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 10:57:27,554 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 10:57:27,555 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 10:57:27,567 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,616 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,627 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 10:57:27,628 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 10:57:27,628 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 10:57:27,628 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 10:57:27,640 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,641 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,650 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,654 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,760 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,779 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,788 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... [2018-11-23 10:57:27,804 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 10:57:27,805 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 10:57:27,805 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 10:57:27,805 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 10:57:27,808 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 10:57:27,882 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 10:57:27,882 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 10:57:27,883 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 10:57:27,883 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 10:57:27,883 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 10:57:27,883 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 10:57:27,883 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 10:57:27,884 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 10:57:27,884 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 10:57:27,884 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 10:57:27,884 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 10:57:27,884 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 10:57:27,885 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 10:57:27,885 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 10:57:27,885 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 10:57:28,535 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 10:57:28,536 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 10:57:34,539 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 10:57:34,540 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 10:57:34,540 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:57:34 BoogieIcfgContainer [2018-11-23 10:57:34,540 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 10:57:34,541 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 10:57:34,542 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 10:57:34,545 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 10:57:34,545 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 10:57:26" (1/3) ... [2018-11-23 10:57:34,546 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@29f3787a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 10:57:34, skipping insertion in model container [2018-11-23 10:57:34,547 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:57:27" (2/3) ... [2018-11-23 10:57:34,547 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@29f3787a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 10:57:34, skipping insertion in model container [2018-11-23 10:57:34,547 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:57:34" (3/3) ... [2018-11-23 10:57:34,549 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 10:57:34,559 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 10:57:34,567 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 10:57:34,585 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 10:57:34,617 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 10:57:34,618 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 10:57:34,618 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 10:57:34,618 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 10:57:34,618 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 10:57:34,619 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 10:57:34,619 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 10:57:34,619 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 10:57:34,619 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 10:57:34,643 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states. [2018-11-23 10:57:34,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 10:57:34,656 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:57:34,657 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:57:34,659 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:57:34,666 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:57:34,666 INFO L82 PathProgramCache]: Analyzing trace with hash 291877897, now seen corresponding path program 1 times [2018-11-23 10:57:34,672 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:57:34,673 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:57:34,693 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:57:34,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:57:34,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:57:34,861 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:57:35,324 INFO L256 TraceCheckUtils]: 0: Hoare triple {157#true} call ULTIMATE.init(); {157#true} is VALID [2018-11-23 10:57:35,328 INFO L273 TraceCheckUtils]: 1: Hoare triple {157#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {157#true} is VALID [2018-11-23 10:57:35,329 INFO L273 TraceCheckUtils]: 2: Hoare triple {157#true} assume true; {157#true} is VALID [2018-11-23 10:57:35,329 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {157#true} {157#true} #607#return; {157#true} is VALID [2018-11-23 10:57:35,330 INFO L256 TraceCheckUtils]: 4: Hoare triple {157#true} call #t~ret139 := main(); {157#true} is VALID [2018-11-23 10:57:35,330 INFO L273 TraceCheckUtils]: 5: Hoare triple {157#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); {157#true} is VALID [2018-11-23 10:57:35,331 INFO L256 TraceCheckUtils]: 6: Hoare triple {157#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {157#true} is VALID [2018-11-23 10:57:35,348 INFO L273 TraceCheckUtils]: 7: Hoare triple {157#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,351 INFO L273 TraceCheckUtils]: 8: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,360 INFO L273 TraceCheckUtils]: 9: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,361 INFO L273 TraceCheckUtils]: 10: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,370 INFO L273 TraceCheckUtils]: 11: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,376 INFO L273 TraceCheckUtils]: 12: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,379 INFO L273 TraceCheckUtils]: 13: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !false; {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,381 INFO L273 TraceCheckUtils]: 14: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,397 INFO L273 TraceCheckUtils]: 15: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,413 INFO L273 TraceCheckUtils]: 16: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,428 INFO L273 TraceCheckUtils]: 17: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,442 INFO L273 TraceCheckUtils]: 18: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,451 INFO L273 TraceCheckUtils]: 19: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,467 INFO L273 TraceCheckUtils]: 20: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,469 INFO L273 TraceCheckUtils]: 21: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,470 INFO L273 TraceCheckUtils]: 22: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,471 INFO L273 TraceCheckUtils]: 23: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,475 INFO L273 TraceCheckUtils]: 24: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,475 INFO L273 TraceCheckUtils]: 25: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,477 INFO L273 TraceCheckUtils]: 26: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,480 INFO L273 TraceCheckUtils]: 27: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,480 INFO L273 TraceCheckUtils]: 28: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,481 INFO L273 TraceCheckUtils]: 29: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,481 INFO L273 TraceCheckUtils]: 30: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,482 INFO L273 TraceCheckUtils]: 31: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,483 INFO L273 TraceCheckUtils]: 32: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,502 INFO L273 TraceCheckUtils]: 33: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,518 INFO L273 TraceCheckUtils]: 34: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,519 INFO L273 TraceCheckUtils]: 35: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,520 INFO L273 TraceCheckUtils]: 36: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,525 INFO L273 TraceCheckUtils]: 37: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,528 INFO L273 TraceCheckUtils]: 38: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,529 INFO L273 TraceCheckUtils]: 39: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,530 INFO L273 TraceCheckUtils]: 40: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,530 INFO L273 TraceCheckUtils]: 41: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,532 INFO L273 TraceCheckUtils]: 42: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,533 INFO L273 TraceCheckUtils]: 43: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,548 INFO L273 TraceCheckUtils]: 44: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,549 INFO L273 TraceCheckUtils]: 45: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,550 INFO L273 TraceCheckUtils]: 46: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,550 INFO L273 TraceCheckUtils]: 47: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 8672bv32 == #t~mem51;havoc #t~mem51; {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,552 INFO L273 TraceCheckUtils]: 48: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} ~ret~0 := #t~nondet122;havoc #t~nondet122; {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:35,553 INFO L273 TraceCheckUtils]: 49: Hoare triple {183#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 4bv32 == ~blastFlag~0; {158#false} is VALID [2018-11-23 10:57:35,554 INFO L273 TraceCheckUtils]: 50: Hoare triple {158#false} assume !false; {158#false} is VALID [2018-11-23 10:57:35,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 10:57:35,571 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (2)] Exception during sending of exit command (exit): Broken pipe [2018-11-23 10:57:35,580 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:57:35,581 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:57:35,590 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-23 10:57:35,594 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:57:35,599 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:57:36,011 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:57:36,011 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:57:36,022 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:57:36,022 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:57:36,026 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 3 states. [2018-11-23 10:57:41,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:57:41,785 INFO L93 Difference]: Finished difference Result 426 states and 712 transitions. [2018-11-23 10:57:41,785 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:57:41,785 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-23 10:57:41,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:57:41,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:57:41,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 712 transitions. [2018-11-23 10:57:41,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:57:41,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 712 transitions. [2018-11-23 10:57:41,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 712 transitions. [2018-11-23 10:57:43,384 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 712 edges. 712 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:57:43,417 INFO L225 Difference]: With dead ends: 426 [2018-11-23 10:57:43,417 INFO L226 Difference]: Without dead ends: 259 [2018-11-23 10:57:43,422 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:57:43,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2018-11-23 10:57:43,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2018-11-23 10:57:43,584 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:57:43,585 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand 259 states. [2018-11-23 10:57:43,586 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand 259 states. [2018-11-23 10:57:43,586 INFO L87 Difference]: Start difference. First operand 259 states. Second operand 259 states. [2018-11-23 10:57:43,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:57:43,600 INFO L93 Difference]: Finished difference Result 259 states and 387 transitions. [2018-11-23 10:57:43,600 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 387 transitions. [2018-11-23 10:57:43,603 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:57:43,603 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:57:43,603 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand 259 states. [2018-11-23 10:57:43,604 INFO L87 Difference]: Start difference. First operand 259 states. Second operand 259 states. [2018-11-23 10:57:43,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:57:43,617 INFO L93 Difference]: Finished difference Result 259 states and 387 transitions. [2018-11-23 10:57:43,618 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 387 transitions. [2018-11-23 10:57:43,620 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:57:43,620 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:57:43,620 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:57:43,621 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:57:43,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-11-23 10:57:43,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 387 transitions. [2018-11-23 10:57:43,635 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 387 transitions. Word has length 51 [2018-11-23 10:57:43,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:57:43,635 INFO L480 AbstractCegarLoop]: Abstraction has 259 states and 387 transitions. [2018-11-23 10:57:43,635 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:57:43,635 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 387 transitions. [2018-11-23 10:57:43,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 10:57:43,638 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:57:43,638 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:57:43,639 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:57:43,639 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:57:43,639 INFO L82 PathProgramCache]: Analyzing trace with hash -51019519, now seen corresponding path program 1 times [2018-11-23 10:57:43,640 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:57:43,640 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:57:43,657 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:57:43,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:57:43,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:57:43,818 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:57:43,940 INFO L256 TraceCheckUtils]: 0: Hoare triple {1649#true} call ULTIMATE.init(); {1649#true} is VALID [2018-11-23 10:57:43,941 INFO L273 TraceCheckUtils]: 1: Hoare triple {1649#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,941 INFO L273 TraceCheckUtils]: 2: Hoare triple {1649#true} assume true; {1649#true} is VALID [2018-11-23 10:57:43,941 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1649#true} {1649#true} #607#return; {1649#true} is VALID [2018-11-23 10:57:43,942 INFO L256 TraceCheckUtils]: 4: Hoare triple {1649#true} call #t~ret139 := main(); {1649#true} is VALID [2018-11-23 10:57:43,942 INFO L273 TraceCheckUtils]: 5: Hoare triple {1649#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,942 INFO L256 TraceCheckUtils]: 6: Hoare triple {1649#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1649#true} is VALID [2018-11-23 10:57:43,943 INFO L273 TraceCheckUtils]: 7: Hoare triple {1649#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,943 INFO L273 TraceCheckUtils]: 8: Hoare triple {1649#true} assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {1649#true} is VALID [2018-11-23 10:57:43,943 INFO L273 TraceCheckUtils]: 9: Hoare triple {1649#true} call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; {1649#true} is VALID [2018-11-23 10:57:43,943 INFO L273 TraceCheckUtils]: 10: Hoare triple {1649#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {1649#true} is VALID [2018-11-23 10:57:43,944 INFO L273 TraceCheckUtils]: 11: Hoare triple {1649#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,944 INFO L273 TraceCheckUtils]: 12: Hoare triple {1649#true} assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; {1649#true} is VALID [2018-11-23 10:57:43,944 INFO L273 TraceCheckUtils]: 13: Hoare triple {1649#true} assume !false; {1649#true} is VALID [2018-11-23 10:57:43,945 INFO L273 TraceCheckUtils]: 14: Hoare triple {1649#true} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,945 INFO L273 TraceCheckUtils]: 15: Hoare triple {1649#true} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,945 INFO L273 TraceCheckUtils]: 16: Hoare triple {1649#true} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,946 INFO L273 TraceCheckUtils]: 17: Hoare triple {1649#true} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,946 INFO L273 TraceCheckUtils]: 18: Hoare triple {1649#true} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,946 INFO L273 TraceCheckUtils]: 19: Hoare triple {1649#true} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,946 INFO L273 TraceCheckUtils]: 20: Hoare triple {1649#true} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,947 INFO L273 TraceCheckUtils]: 21: Hoare triple {1649#true} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,947 INFO L273 TraceCheckUtils]: 22: Hoare triple {1649#true} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:57:43,947 INFO L273 TraceCheckUtils]: 23: Hoare triple {1649#true} assume 8464bv32 == #t~mem27;havoc #t~mem27; {1649#true} is VALID [2018-11-23 10:57:43,948 INFO L273 TraceCheckUtils]: 24: Hoare triple {1649#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; {1649#true} is VALID [2018-11-23 10:57:43,948 INFO L273 TraceCheckUtils]: 25: Hoare triple {1649#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,953 INFO L273 TraceCheckUtils]: 26: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,953 INFO L273 TraceCheckUtils]: 27: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,954 INFO L273 TraceCheckUtils]: 28: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,954 INFO L273 TraceCheckUtils]: 29: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,955 INFO L273 TraceCheckUtils]: 30: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !false; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,955 INFO L273 TraceCheckUtils]: 31: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,958 INFO L273 TraceCheckUtils]: 32: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,958 INFO L273 TraceCheckUtils]: 33: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,959 INFO L273 TraceCheckUtils]: 34: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,959 INFO L273 TraceCheckUtils]: 35: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,960 INFO L273 TraceCheckUtils]: 36: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,960 INFO L273 TraceCheckUtils]: 37: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,961 INFO L273 TraceCheckUtils]: 38: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,962 INFO L273 TraceCheckUtils]: 39: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,963 INFO L273 TraceCheckUtils]: 40: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,964 INFO L273 TraceCheckUtils]: 41: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,965 INFO L273 TraceCheckUtils]: 42: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,966 INFO L273 TraceCheckUtils]: 43: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,967 INFO L273 TraceCheckUtils]: 44: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,968 INFO L273 TraceCheckUtils]: 45: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,969 INFO L273 TraceCheckUtils]: 46: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,969 INFO L273 TraceCheckUtils]: 47: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,970 INFO L273 TraceCheckUtils]: 48: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,970 INFO L273 TraceCheckUtils]: 49: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,971 INFO L273 TraceCheckUtils]: 50: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,972 INFO L273 TraceCheckUtils]: 51: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,972 INFO L273 TraceCheckUtils]: 52: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,973 INFO L273 TraceCheckUtils]: 53: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,974 INFO L273 TraceCheckUtils]: 54: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,975 INFO L273 TraceCheckUtils]: 55: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,980 INFO L273 TraceCheckUtils]: 56: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,981 INFO L273 TraceCheckUtils]: 57: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,982 INFO L273 TraceCheckUtils]: 58: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,982 INFO L273 TraceCheckUtils]: 59: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,983 INFO L273 TraceCheckUtils]: 60: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,983 INFO L273 TraceCheckUtils]: 61: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,985 INFO L273 TraceCheckUtils]: 62: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,985 INFO L273 TraceCheckUtils]: 63: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,986 INFO L273 TraceCheckUtils]: 64: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume 8672bv32 == #t~mem51;havoc #t~mem51; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,986 INFO L273 TraceCheckUtils]: 65: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} ~ret~0 := #t~nondet122;havoc #t~nondet122; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:43,987 INFO L273 TraceCheckUtils]: 66: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume 4bv32 == ~blastFlag~0; {1650#false} is VALID [2018-11-23 10:57:43,987 INFO L273 TraceCheckUtils]: 67: Hoare triple {1650#false} assume !false; {1650#false} is VALID [2018-11-23 10:57:43,997 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 10:57:43,998 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:57:44,009 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:57:44,010 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:57:44,011 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2018-11-23 10:57:44,013 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:57:44,013 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:57:44,165 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:57:44,166 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:57:44,166 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:57:44,167 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:57:44,167 INFO L87 Difference]: Start difference. First operand 259 states and 387 transitions. Second operand 3 states. [2018-11-23 10:57:53,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:57:53,539 INFO L93 Difference]: Finished difference Result 502 states and 760 transitions. [2018-11-23 10:57:53,539 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:57:53,540 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2018-11-23 10:57:53,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:57:53,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:57:53,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 579 transitions. [2018-11-23 10:57:53,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:57:53,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 579 transitions. [2018-11-23 10:57:53,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 579 transitions. [2018-11-23 10:57:54,855 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 579 edges. 579 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:57:54,874 INFO L225 Difference]: With dead ends: 502 [2018-11-23 10:57:54,874 INFO L226 Difference]: Without dead ends: 378 [2018-11-23 10:57:54,876 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:57:54,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2018-11-23 10:57:55,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 378. [2018-11-23 10:57:55,140 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:57:55,140 INFO L82 GeneralOperation]: Start isEquivalent. First operand 378 states. Second operand 378 states. [2018-11-23 10:57:55,141 INFO L74 IsIncluded]: Start isIncluded. First operand 378 states. Second operand 378 states. [2018-11-23 10:57:55,141 INFO L87 Difference]: Start difference. First operand 378 states. Second operand 378 states. [2018-11-23 10:57:55,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:57:55,159 INFO L93 Difference]: Finished difference Result 378 states and 565 transitions. [2018-11-23 10:57:55,159 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 565 transitions. [2018-11-23 10:57:55,160 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:57:55,160 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:57:55,160 INFO L74 IsIncluded]: Start isIncluded. First operand 378 states. Second operand 378 states. [2018-11-23 10:57:55,160 INFO L87 Difference]: Start difference. First operand 378 states. Second operand 378 states. [2018-11-23 10:57:55,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:57:55,177 INFO L93 Difference]: Finished difference Result 378 states and 565 transitions. [2018-11-23 10:57:55,178 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 565 transitions. [2018-11-23 10:57:55,179 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:57:55,179 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:57:55,179 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:57:55,179 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:57:55,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 378 states. [2018-11-23 10:57:55,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 565 transitions. [2018-11-23 10:57:55,197 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 565 transitions. Word has length 68 [2018-11-23 10:57:55,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:57:55,197 INFO L480 AbstractCegarLoop]: Abstraction has 378 states and 565 transitions. [2018-11-23 10:57:55,197 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:57:55,197 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 565 transitions. [2018-11-23 10:57:55,200 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 10:57:55,200 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:57:55,201 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:57:55,201 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:57:55,201 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:57:55,201 INFO L82 PathProgramCache]: Analyzing trace with hash -896304831, now seen corresponding path program 1 times [2018-11-23 10:57:55,202 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:57:55,202 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:57:55,237 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:57:55,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:57:55,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:57:55,412 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:57:55,551 INFO L256 TraceCheckUtils]: 0: Hoare triple {3660#true} call ULTIMATE.init(); {3660#true} is VALID [2018-11-23 10:57:55,551 INFO L273 TraceCheckUtils]: 1: Hoare triple {3660#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,552 INFO L273 TraceCheckUtils]: 2: Hoare triple {3660#true} assume true; {3660#true} is VALID [2018-11-23 10:57:55,552 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3660#true} {3660#true} #607#return; {3660#true} is VALID [2018-11-23 10:57:55,552 INFO L256 TraceCheckUtils]: 4: Hoare triple {3660#true} call #t~ret139 := main(); {3660#true} is VALID [2018-11-23 10:57:55,552 INFO L273 TraceCheckUtils]: 5: Hoare triple {3660#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,553 INFO L256 TraceCheckUtils]: 6: Hoare triple {3660#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3660#true} is VALID [2018-11-23 10:57:55,553 INFO L273 TraceCheckUtils]: 7: Hoare triple {3660#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,553 INFO L273 TraceCheckUtils]: 8: Hoare triple {3660#true} assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {3660#true} is VALID [2018-11-23 10:57:55,554 INFO L273 TraceCheckUtils]: 9: Hoare triple {3660#true} call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; {3660#true} is VALID [2018-11-23 10:57:55,554 INFO L273 TraceCheckUtils]: 10: Hoare triple {3660#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {3660#true} is VALID [2018-11-23 10:57:55,554 INFO L273 TraceCheckUtils]: 11: Hoare triple {3660#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,554 INFO L273 TraceCheckUtils]: 12: Hoare triple {3660#true} assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; {3660#true} is VALID [2018-11-23 10:57:55,555 INFO L273 TraceCheckUtils]: 13: Hoare triple {3660#true} assume !false; {3660#true} is VALID [2018-11-23 10:57:55,555 INFO L273 TraceCheckUtils]: 14: Hoare triple {3660#true} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,555 INFO L273 TraceCheckUtils]: 15: Hoare triple {3660#true} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,555 INFO L273 TraceCheckUtils]: 16: Hoare triple {3660#true} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,555 INFO L273 TraceCheckUtils]: 17: Hoare triple {3660#true} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,556 INFO L273 TraceCheckUtils]: 18: Hoare triple {3660#true} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,556 INFO L273 TraceCheckUtils]: 19: Hoare triple {3660#true} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,556 INFO L273 TraceCheckUtils]: 20: Hoare triple {3660#true} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,556 INFO L273 TraceCheckUtils]: 21: Hoare triple {3660#true} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,557 INFO L273 TraceCheckUtils]: 22: Hoare triple {3660#true} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,557 INFO L273 TraceCheckUtils]: 23: Hoare triple {3660#true} assume 8464bv32 == #t~mem27;havoc #t~mem27; {3660#true} is VALID [2018-11-23 10:57:55,557 INFO L273 TraceCheckUtils]: 24: Hoare triple {3660#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; {3660#true} is VALID [2018-11-23 10:57:55,557 INFO L273 TraceCheckUtils]: 25: Hoare triple {3660#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {3660#true} is VALID [2018-11-23 10:57:55,558 INFO L273 TraceCheckUtils]: 26: Hoare triple {3660#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,558 INFO L273 TraceCheckUtils]: 27: Hoare triple {3660#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,558 INFO L273 TraceCheckUtils]: 28: Hoare triple {3660#true} assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; {3660#true} is VALID [2018-11-23 10:57:55,558 INFO L273 TraceCheckUtils]: 29: Hoare triple {3660#true} ~skip~0 := 0bv32; {3660#true} is VALID [2018-11-23 10:57:55,559 INFO L273 TraceCheckUtils]: 30: Hoare triple {3660#true} assume !false; {3660#true} is VALID [2018-11-23 10:57:55,559 INFO L273 TraceCheckUtils]: 31: Hoare triple {3660#true} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,559 INFO L273 TraceCheckUtils]: 32: Hoare triple {3660#true} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,559 INFO L273 TraceCheckUtils]: 33: Hoare triple {3660#true} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,560 INFO L273 TraceCheckUtils]: 34: Hoare triple {3660#true} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,560 INFO L273 TraceCheckUtils]: 35: Hoare triple {3660#true} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,560 INFO L273 TraceCheckUtils]: 36: Hoare triple {3660#true} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,560 INFO L273 TraceCheckUtils]: 37: Hoare triple {3660#true} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,561 INFO L273 TraceCheckUtils]: 38: Hoare triple {3660#true} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,561 INFO L273 TraceCheckUtils]: 39: Hoare triple {3660#true} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,561 INFO L273 TraceCheckUtils]: 40: Hoare triple {3660#true} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,561 INFO L273 TraceCheckUtils]: 41: Hoare triple {3660#true} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,562 INFO L273 TraceCheckUtils]: 42: Hoare triple {3660#true} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3660#true} is VALID [2018-11-23 10:57:55,562 INFO L273 TraceCheckUtils]: 43: Hoare triple {3660#true} assume 8496bv32 == #t~mem30;havoc #t~mem30; {3660#true} is VALID [2018-11-23 10:57:55,562 INFO L273 TraceCheckUtils]: 44: Hoare triple {3660#true} ~ret~0 := #t~nondet67;havoc #t~nondet67; {3660#true} is VALID [2018-11-23 10:57:55,575 INFO L273 TraceCheckUtils]: 45: Hoare triple {3660#true} assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,587 INFO L273 TraceCheckUtils]: 46: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,588 INFO L273 TraceCheckUtils]: 47: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != #t~mem68;havoc #t~mem68;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,589 INFO L273 TraceCheckUtils]: 48: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,591 INFO L273 TraceCheckUtils]: 49: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,591 INFO L273 TraceCheckUtils]: 50: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,593 INFO L273 TraceCheckUtils]: 51: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,593 INFO L273 TraceCheckUtils]: 52: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !false; {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,596 INFO L273 TraceCheckUtils]: 53: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,596 INFO L273 TraceCheckUtils]: 54: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,598 INFO L273 TraceCheckUtils]: 55: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,598 INFO L273 TraceCheckUtils]: 56: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,601 INFO L273 TraceCheckUtils]: 57: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,601 INFO L273 TraceCheckUtils]: 58: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,603 INFO L273 TraceCheckUtils]: 59: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,603 INFO L273 TraceCheckUtils]: 60: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,604 INFO L273 TraceCheckUtils]: 61: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,604 INFO L273 TraceCheckUtils]: 62: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,605 INFO L273 TraceCheckUtils]: 63: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,605 INFO L273 TraceCheckUtils]: 64: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,607 INFO L273 TraceCheckUtils]: 65: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,608 INFO L273 TraceCheckUtils]: 66: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,608 INFO L273 TraceCheckUtils]: 67: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,609 INFO L273 TraceCheckUtils]: 68: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,609 INFO L273 TraceCheckUtils]: 69: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,610 INFO L273 TraceCheckUtils]: 70: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,611 INFO L273 TraceCheckUtils]: 71: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,612 INFO L273 TraceCheckUtils]: 72: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,617 INFO L273 TraceCheckUtils]: 73: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,617 INFO L273 TraceCheckUtils]: 74: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,620 INFO L273 TraceCheckUtils]: 75: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,620 INFO L273 TraceCheckUtils]: 76: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,623 INFO L273 TraceCheckUtils]: 77: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,626 INFO L273 TraceCheckUtils]: 78: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,627 INFO L273 TraceCheckUtils]: 79: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,627 INFO L273 TraceCheckUtils]: 80: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,629 INFO L273 TraceCheckUtils]: 81: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,629 INFO L273 TraceCheckUtils]: 82: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,631 INFO L273 TraceCheckUtils]: 83: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,632 INFO L273 TraceCheckUtils]: 84: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,633 INFO L273 TraceCheckUtils]: 85: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,639 INFO L273 TraceCheckUtils]: 86: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 8672bv32 == #t~mem51;havoc #t~mem51; {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,640 INFO L273 TraceCheckUtils]: 87: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} ~ret~0 := #t~nondet122;havoc #t~nondet122; {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:57:55,645 INFO L273 TraceCheckUtils]: 88: Hoare triple {3800#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 4bv32 == ~blastFlag~0; {3661#false} is VALID [2018-11-23 10:57:55,645 INFO L273 TraceCheckUtils]: 89: Hoare triple {3661#false} assume !false; {3661#false} is VALID [2018-11-23 10:57:55,658 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 10:57:55,661 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:57:55,669 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:57:55,669 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:57:55,670 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 90 [2018-11-23 10:57:55,671 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:57:55,671 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:57:55,859 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:57:55,859 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:57:55,860 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:57:55,860 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:57:55,860 INFO L87 Difference]: Start difference. First operand 378 states and 565 transitions. Second operand 3 states. [2018-11-23 10:58:03,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:03,551 INFO L93 Difference]: Finished difference Result 741 states and 1118 transitions. [2018-11-23 10:58:03,551 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:58:03,551 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 90 [2018-11-23 10:58:03,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:58:03,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:58:03,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 581 transitions. [2018-11-23 10:58:03,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:58:03,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 581 transitions. [2018-11-23 10:58:03,566 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 581 transitions. [2018-11-23 10:58:04,718 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 581 edges. 581 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:58:04,739 INFO L225 Difference]: With dead ends: 741 [2018-11-23 10:58:04,739 INFO L226 Difference]: Without dead ends: 498 [2018-11-23 10:58:04,741 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:58:04,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2018-11-23 10:58:04,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 498. [2018-11-23 10:58:04,986 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:58:04,986 INFO L82 GeneralOperation]: Start isEquivalent. First operand 498 states. Second operand 498 states. [2018-11-23 10:58:04,987 INFO L74 IsIncluded]: Start isIncluded. First operand 498 states. Second operand 498 states. [2018-11-23 10:58:04,987 INFO L87 Difference]: Start difference. First operand 498 states. Second operand 498 states. [2018-11-23 10:58:05,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:05,008 INFO L93 Difference]: Finished difference Result 498 states and 745 transitions. [2018-11-23 10:58:05,008 INFO L276 IsEmpty]: Start isEmpty. Operand 498 states and 745 transitions. [2018-11-23 10:58:05,009 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:58:05,009 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:58:05,010 INFO L74 IsIncluded]: Start isIncluded. First operand 498 states. Second operand 498 states. [2018-11-23 10:58:05,010 INFO L87 Difference]: Start difference. First operand 498 states. Second operand 498 states. [2018-11-23 10:58:05,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:05,029 INFO L93 Difference]: Finished difference Result 498 states and 745 transitions. [2018-11-23 10:58:05,030 INFO L276 IsEmpty]: Start isEmpty. Operand 498 states and 745 transitions. [2018-11-23 10:58:05,031 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:58:05,031 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:58:05,031 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:58:05,031 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:58:05,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 498 states. [2018-11-23 10:58:05,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 498 states to 498 states and 745 transitions. [2018-11-23 10:58:05,051 INFO L78 Accepts]: Start accepts. Automaton has 498 states and 745 transitions. Word has length 90 [2018-11-23 10:58:05,052 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:58:05,052 INFO L480 AbstractCegarLoop]: Abstraction has 498 states and 745 transitions. [2018-11-23 10:58:05,052 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:58:05,052 INFO L276 IsEmpty]: Start isEmpty. Operand 498 states and 745 transitions. [2018-11-23 10:58:05,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 10:58:05,055 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:58:05,055 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:58:05,055 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:58:05,055 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:58:05,056 INFO L82 PathProgramCache]: Analyzing trace with hash 398999817, now seen corresponding path program 1 times [2018-11-23 10:58:05,057 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:58:05,057 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:58:05,087 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:58:05,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:58:05,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:58:05,356 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:58:05,791 INFO L256 TraceCheckUtils]: 0: Hoare triple {6402#true} call ULTIMATE.init(); {6402#true} is VALID [2018-11-23 10:58:05,791 INFO L273 TraceCheckUtils]: 1: Hoare triple {6402#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,791 INFO L273 TraceCheckUtils]: 2: Hoare triple {6402#true} assume true; {6402#true} is VALID [2018-11-23 10:58:05,792 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6402#true} {6402#true} #607#return; {6402#true} is VALID [2018-11-23 10:58:05,792 INFO L256 TraceCheckUtils]: 4: Hoare triple {6402#true} call #t~ret139 := main(); {6402#true} is VALID [2018-11-23 10:58:05,792 INFO L273 TraceCheckUtils]: 5: Hoare triple {6402#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,793 INFO L256 TraceCheckUtils]: 6: Hoare triple {6402#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6402#true} is VALID [2018-11-23 10:58:05,793 INFO L273 TraceCheckUtils]: 7: Hoare triple {6402#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,793 INFO L273 TraceCheckUtils]: 8: Hoare triple {6402#true} assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {6402#true} is VALID [2018-11-23 10:58:05,794 INFO L273 TraceCheckUtils]: 9: Hoare triple {6402#true} call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; {6402#true} is VALID [2018-11-23 10:58:05,794 INFO L273 TraceCheckUtils]: 10: Hoare triple {6402#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {6402#true} is VALID [2018-11-23 10:58:05,794 INFO L273 TraceCheckUtils]: 11: Hoare triple {6402#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,794 INFO L273 TraceCheckUtils]: 12: Hoare triple {6402#true} assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; {6402#true} is VALID [2018-11-23 10:58:05,794 INFO L273 TraceCheckUtils]: 13: Hoare triple {6402#true} assume !false; {6402#true} is VALID [2018-11-23 10:58:05,794 INFO L273 TraceCheckUtils]: 14: Hoare triple {6402#true} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,795 INFO L273 TraceCheckUtils]: 15: Hoare triple {6402#true} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,795 INFO L273 TraceCheckUtils]: 16: Hoare triple {6402#true} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,795 INFO L273 TraceCheckUtils]: 17: Hoare triple {6402#true} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,795 INFO L273 TraceCheckUtils]: 18: Hoare triple {6402#true} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,795 INFO L273 TraceCheckUtils]: 19: Hoare triple {6402#true} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,796 INFO L273 TraceCheckUtils]: 20: Hoare triple {6402#true} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,796 INFO L273 TraceCheckUtils]: 21: Hoare triple {6402#true} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,796 INFO L273 TraceCheckUtils]: 22: Hoare triple {6402#true} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,796 INFO L273 TraceCheckUtils]: 23: Hoare triple {6402#true} assume 8464bv32 == #t~mem27;havoc #t~mem27; {6402#true} is VALID [2018-11-23 10:58:05,796 INFO L273 TraceCheckUtils]: 24: Hoare triple {6402#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; {6402#true} is VALID [2018-11-23 10:58:05,797 INFO L273 TraceCheckUtils]: 25: Hoare triple {6402#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {6402#true} is VALID [2018-11-23 10:58:05,797 INFO L273 TraceCheckUtils]: 26: Hoare triple {6402#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,797 INFO L273 TraceCheckUtils]: 27: Hoare triple {6402#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,797 INFO L273 TraceCheckUtils]: 28: Hoare triple {6402#true} assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; {6402#true} is VALID [2018-11-23 10:58:05,797 INFO L273 TraceCheckUtils]: 29: Hoare triple {6402#true} ~skip~0 := 0bv32; {6402#true} is VALID [2018-11-23 10:58:05,798 INFO L273 TraceCheckUtils]: 30: Hoare triple {6402#true} assume !false; {6402#true} is VALID [2018-11-23 10:58:05,798 INFO L273 TraceCheckUtils]: 31: Hoare triple {6402#true} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,798 INFO L273 TraceCheckUtils]: 32: Hoare triple {6402#true} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,798 INFO L273 TraceCheckUtils]: 33: Hoare triple {6402#true} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,798 INFO L273 TraceCheckUtils]: 34: Hoare triple {6402#true} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,798 INFO L273 TraceCheckUtils]: 35: Hoare triple {6402#true} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,799 INFO L273 TraceCheckUtils]: 36: Hoare triple {6402#true} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,799 INFO L273 TraceCheckUtils]: 37: Hoare triple {6402#true} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,799 INFO L273 TraceCheckUtils]: 38: Hoare triple {6402#true} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,799 INFO L273 TraceCheckUtils]: 39: Hoare triple {6402#true} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,799 INFO L273 TraceCheckUtils]: 40: Hoare triple {6402#true} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,799 INFO L273 TraceCheckUtils]: 41: Hoare triple {6402#true} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,800 INFO L273 TraceCheckUtils]: 42: Hoare triple {6402#true} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,800 INFO L273 TraceCheckUtils]: 43: Hoare triple {6402#true} assume 8496bv32 == #t~mem30;havoc #t~mem30; {6402#true} is VALID [2018-11-23 10:58:05,800 INFO L273 TraceCheckUtils]: 44: Hoare triple {6402#true} ~ret~0 := #t~nondet67;havoc #t~nondet67; {6402#true} is VALID [2018-11-23 10:58:05,800 INFO L273 TraceCheckUtils]: 45: Hoare triple {6402#true} assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; {6402#true} is VALID [2018-11-23 10:58:05,800 INFO L273 TraceCheckUtils]: 46: Hoare triple {6402#true} assume !~bvsle32(~ret~0, 0bv32);call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,801 INFO L273 TraceCheckUtils]: 47: Hoare triple {6402#true} assume 0bv32 != #t~mem68;havoc #t~mem68;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,801 INFO L273 TraceCheckUtils]: 48: Hoare triple {6402#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,801 INFO L273 TraceCheckUtils]: 49: Hoare triple {6402#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,801 INFO L273 TraceCheckUtils]: 50: Hoare triple {6402#true} assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; {6402#true} is VALID [2018-11-23 10:58:05,802 INFO L273 TraceCheckUtils]: 51: Hoare triple {6402#true} ~skip~0 := 0bv32; {6402#true} is VALID [2018-11-23 10:58:05,802 INFO L273 TraceCheckUtils]: 52: Hoare triple {6402#true} assume !false; {6402#true} is VALID [2018-11-23 10:58:05,802 INFO L273 TraceCheckUtils]: 53: Hoare triple {6402#true} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,802 INFO L273 TraceCheckUtils]: 54: Hoare triple {6402#true} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,802 INFO L273 TraceCheckUtils]: 55: Hoare triple {6402#true} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,803 INFO L273 TraceCheckUtils]: 56: Hoare triple {6402#true} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,803 INFO L273 TraceCheckUtils]: 57: Hoare triple {6402#true} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,803 INFO L273 TraceCheckUtils]: 58: Hoare triple {6402#true} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,803 INFO L273 TraceCheckUtils]: 59: Hoare triple {6402#true} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,803 INFO L273 TraceCheckUtils]: 60: Hoare triple {6402#true} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,803 INFO L273 TraceCheckUtils]: 61: Hoare triple {6402#true} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,804 INFO L273 TraceCheckUtils]: 62: Hoare triple {6402#true} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,804 INFO L273 TraceCheckUtils]: 63: Hoare triple {6402#true} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,804 INFO L273 TraceCheckUtils]: 64: Hoare triple {6402#true} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,804 INFO L273 TraceCheckUtils]: 65: Hoare triple {6402#true} assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,804 INFO L273 TraceCheckUtils]: 66: Hoare triple {6402#true} assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,805 INFO L273 TraceCheckUtils]: 67: Hoare triple {6402#true} assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,805 INFO L273 TraceCheckUtils]: 68: Hoare triple {6402#true} assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,805 INFO L273 TraceCheckUtils]: 69: Hoare triple {6402#true} assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,805 INFO L273 TraceCheckUtils]: 70: Hoare triple {6402#true} assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,805 INFO L273 TraceCheckUtils]: 71: Hoare triple {6402#true} assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,806 INFO L273 TraceCheckUtils]: 72: Hoare triple {6402#true} assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,806 INFO L273 TraceCheckUtils]: 73: Hoare triple {6402#true} assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,806 INFO L273 TraceCheckUtils]: 74: Hoare triple {6402#true} assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,806 INFO L273 TraceCheckUtils]: 75: Hoare triple {6402#true} assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,806 INFO L273 TraceCheckUtils]: 76: Hoare triple {6402#true} assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,806 INFO L273 TraceCheckUtils]: 77: Hoare triple {6402#true} assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 78: Hoare triple {6402#true} assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 79: Hoare triple {6402#true} assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 80: Hoare triple {6402#true} assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 81: Hoare triple {6402#true} assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 82: Hoare triple {6402#true} assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 83: Hoare triple {6402#true} assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6402#true} is VALID [2018-11-23 10:58:05,807 INFO L273 TraceCheckUtils]: 84: Hoare triple {6402#true} assume 8656bv32 == #t~mem49;havoc #t~mem49; {6402#true} is VALID [2018-11-23 10:58:05,808 INFO L273 TraceCheckUtils]: 85: Hoare triple {6402#true} call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem116.base, #t~mem116.offset;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; {6402#true} is VALID [2018-11-23 10:58:05,808 INFO L273 TraceCheckUtils]: 86: Hoare triple {6402#true} assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; {6402#true} is VALID [2018-11-23 10:58:05,809 INFO L273 TraceCheckUtils]: 87: Hoare triple {6402#true} assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 5bv32; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,809 INFO L273 TraceCheckUtils]: 88: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32);~tmp___10~0 := #t~nondet121;havoc #t~nondet121; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,810 INFO L273 TraceCheckUtils]: 89: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == ~tmp___10~0); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,810 INFO L273 TraceCheckUtils]: 90: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,810 INFO L273 TraceCheckUtils]: 91: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,811 INFO L273 TraceCheckUtils]: 92: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,811 INFO L273 TraceCheckUtils]: 93: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !false; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,812 INFO L273 TraceCheckUtils]: 94: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,813 INFO L273 TraceCheckUtils]: 95: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,813 INFO L273 TraceCheckUtils]: 96: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,814 INFO L273 TraceCheckUtils]: 97: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,816 INFO L273 TraceCheckUtils]: 98: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,817 INFO L273 TraceCheckUtils]: 99: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,833 INFO L273 TraceCheckUtils]: 100: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,849 INFO L273 TraceCheckUtils]: 101: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,865 INFO L273 TraceCheckUtils]: 102: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,879 INFO L273 TraceCheckUtils]: 103: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,893 INFO L273 TraceCheckUtils]: 104: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,908 INFO L273 TraceCheckUtils]: 105: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,922 INFO L273 TraceCheckUtils]: 106: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,922 INFO L273 TraceCheckUtils]: 107: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,924 INFO L273 TraceCheckUtils]: 108: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,927 INFO L273 TraceCheckUtils]: 109: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,927 INFO L273 TraceCheckUtils]: 110: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,945 INFO L273 TraceCheckUtils]: 111: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,960 INFO L273 TraceCheckUtils]: 112: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,969 INFO L273 TraceCheckUtils]: 113: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,969 INFO L273 TraceCheckUtils]: 114: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,971 INFO L273 TraceCheckUtils]: 115: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,971 INFO L273 TraceCheckUtils]: 116: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,973 INFO L273 TraceCheckUtils]: 117: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,973 INFO L273 TraceCheckUtils]: 118: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,975 INFO L273 TraceCheckUtils]: 119: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,975 INFO L273 TraceCheckUtils]: 120: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,975 INFO L273 TraceCheckUtils]: 121: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,976 INFO L273 TraceCheckUtils]: 122: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,976 INFO L273 TraceCheckUtils]: 123: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,976 INFO L273 TraceCheckUtils]: 124: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,977 INFO L273 TraceCheckUtils]: 125: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,977 INFO L273 TraceCheckUtils]: 126: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,977 INFO L273 TraceCheckUtils]: 127: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume 8672bv32 == #t~mem51;havoc #t~mem51; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,978 INFO L273 TraceCheckUtils]: 128: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} ~ret~0 := #t~nondet122;havoc #t~nondet122; {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:05,978 INFO L273 TraceCheckUtils]: 129: Hoare triple {6668#(= (_ bv5 32) ssl3_accept_~blastFlag~0)} assume 4bv32 == ~blastFlag~0; {6403#false} is VALID [2018-11-23 10:58:05,979 INFO L273 TraceCheckUtils]: 130: Hoare triple {6403#false} assume !false; {6403#false} is VALID [2018-11-23 10:58:05,989 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 10:58:05,990 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:58:05,992 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:58:05,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:58:05,992 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 10:58:05,993 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:58:05,993 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:58:06,154 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 105 edges. 105 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:58:06,155 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:58:06,155 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:58:06,155 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:58:06,156 INFO L87 Difference]: Start difference. First operand 498 states and 745 transitions. Second operand 3 states. [2018-11-23 10:58:12,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:12,506 INFO L93 Difference]: Finished difference Result 858 states and 1288 transitions. [2018-11-23 10:58:12,507 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:58:12,507 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 10:58:12,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:58:12,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:58:12,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 576 transitions. [2018-11-23 10:58:12,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:58:12,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 576 transitions. [2018-11-23 10:58:12,520 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 576 transitions. [2018-11-23 10:58:13,926 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 576 edges. 576 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:58:13,943 INFO L225 Difference]: With dead ends: 858 [2018-11-23 10:58:13,943 INFO L226 Difference]: Without dead ends: 495 [2018-11-23 10:58:13,944 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:58:13,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 495 states. [2018-11-23 10:58:14,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 495 to 495. [2018-11-23 10:58:14,269 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:58:14,269 INFO L82 GeneralOperation]: Start isEquivalent. First operand 495 states. Second operand 495 states. [2018-11-23 10:58:14,269 INFO L74 IsIncluded]: Start isIncluded. First operand 495 states. Second operand 495 states. [2018-11-23 10:58:14,269 INFO L87 Difference]: Start difference. First operand 495 states. Second operand 495 states. [2018-11-23 10:58:14,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:14,289 INFO L93 Difference]: Finished difference Result 495 states and 735 transitions. [2018-11-23 10:58:14,289 INFO L276 IsEmpty]: Start isEmpty. Operand 495 states and 735 transitions. [2018-11-23 10:58:14,290 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:58:14,290 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:58:14,290 INFO L74 IsIncluded]: Start isIncluded. First operand 495 states. Second operand 495 states. [2018-11-23 10:58:14,291 INFO L87 Difference]: Start difference. First operand 495 states. Second operand 495 states. [2018-11-23 10:58:14,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:14,311 INFO L93 Difference]: Finished difference Result 495 states and 735 transitions. [2018-11-23 10:58:14,311 INFO L276 IsEmpty]: Start isEmpty. Operand 495 states and 735 transitions. [2018-11-23 10:58:14,312 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:58:14,312 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:58:14,312 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:58:14,313 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:58:14,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 495 states. [2018-11-23 10:58:14,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 495 states to 495 states and 735 transitions. [2018-11-23 10:58:14,332 INFO L78 Accepts]: Start accepts. Automaton has 495 states and 735 transitions. Word has length 131 [2018-11-23 10:58:14,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:58:14,333 INFO L480 AbstractCegarLoop]: Abstraction has 495 states and 735 transitions. [2018-11-23 10:58:14,333 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:58:14,333 INFO L276 IsEmpty]: Start isEmpty. Operand 495 states and 735 transitions. [2018-11-23 10:58:14,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-23 10:58:14,336 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:58:14,336 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:58:14,336 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:58:14,336 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:58:14,337 INFO L82 PathProgramCache]: Analyzing trace with hash -515907609, now seen corresponding path program 1 times [2018-11-23 10:58:14,337 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:58:14,338 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:58:14,367 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:58:15,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 10:58:16,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 10:58:16,347 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #607#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv7 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv7 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem14.base|=(_ bv0 32), |ssl3_accept_#t~mem14.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem17.base|=(_ bv1 32), |ssl3_accept_#t~mem17.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem68|=(_ bv256 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != #t~mem68;havoc #t~mem68;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8656bv32 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem116.base, #t~mem116.offset;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 5bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32);~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem50|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem51|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8672bv32 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(4bv32 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 5bv32 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 10:58:16,579 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 10:58:16,581 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: ssl3_acceptENTRY has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 10:58:16,670 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: L1114 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: L1114 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: L1075-1 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: L1114-2 has no Hoare annotation [2018-11-23 10:58:16,671 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1120 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1120 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1120-1 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1129 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: L1129 has no Hoare annotation [2018-11-23 10:58:16,672 WARN L170 areAnnotationChecker]: ssl3_acceptFINAL has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1135-2 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1135-2 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1135-2 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: ssl3_acceptEXIT has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1696 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1136 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1700 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1700 has no Hoare annotation [2018-11-23 10:58:16,673 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1700-2 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1141 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1141 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1248 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1144 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1144 has no Hoare annotation [2018-11-23 10:58:16,674 WARN L170 areAnnotationChecker]: L1253 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1253 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1147 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1147 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1253-2 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1150 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1150 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1258 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1258 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1153 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1153 has no Hoare annotation [2018-11-23 10:58:16,675 WARN L170 areAnnotationChecker]: L1264 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1264 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1156 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1156 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1266 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1266 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1264-2 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1303 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1303 has no Hoare annotation [2018-11-23 10:58:16,676 WARN L170 areAnnotationChecker]: L1159 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1159 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1277 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1277 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1627 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1162 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1162 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1284 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1284 has no Hoare annotation [2018-11-23 10:58:16,677 WARN L170 areAnnotationChecker]: L1665 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1665 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1165 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1165 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1286 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1286 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1666 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1666 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1665-1 has no Hoare annotation [2018-11-23 10:58:16,678 WARN L170 areAnnotationChecker]: L1320 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1320 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1168 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1168 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1667 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1667 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1320-2 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1320-2 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1171 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1171 has no Hoare annotation [2018-11-23 10:58:16,679 WARN L170 areAnnotationChecker]: L1669 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1669 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1667-2 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1667-2 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1174 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1174 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1678 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1678 has no Hoare annotation [2018-11-23 10:58:16,680 WARN L170 areAnnotationChecker]: L1337 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1337 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1177 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1177 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1337-2 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1337-2 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1180 has no Hoare annotation [2018-11-23 10:58:16,681 WARN L170 areAnnotationChecker]: L1180 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1347 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1347 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1356 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1356 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1183 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1183 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1347-2 has no Hoare annotation [2018-11-23 10:58:16,682 WARN L170 areAnnotationChecker]: L1356-2 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1360 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1360 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1186 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1186 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1372 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1372 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1189 has no Hoare annotation [2018-11-23 10:58:16,683 WARN L170 areAnnotationChecker]: L1189 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1372-2 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1192 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1192 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1419 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1419 has no Hoare annotation [2018-11-23 10:58:16,684 WARN L170 areAnnotationChecker]: L1195 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1195 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1395 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1380 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1380 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1420 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1420 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 10:58:16,685 WARN L170 areAnnotationChecker]: L1198 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1198 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1383 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1383 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1421 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1421 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1429 has no Hoare annotation [2018-11-23 10:58:16,686 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1201 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1201 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1383-1 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1384 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1384 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1430 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1430 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 10:58:16,687 WARN L170 areAnnotationChecker]: L1204 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1204 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1431 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1431 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1439 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1472 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1472 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 10:58:16,688 WARN L170 areAnnotationChecker]: L1207 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1207 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1442 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1442 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1475 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1475 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1472-2 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1490 has no Hoare annotation [2018-11-23 10:58:16,689 WARN L170 areAnnotationChecker]: L1490 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1210 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1210 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1389-2 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1389-2 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1495 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1495 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1213 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1213 has no Hoare annotation [2018-11-23 10:58:16,690 WARN L170 areAnnotationChecker]: L1499 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1499 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1511 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1511 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1216 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1216 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1219 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1219 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1522 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1522 has no Hoare annotation [2018-11-23 10:58:16,691 WARN L170 areAnnotationChecker]: L1222 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1222 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1225 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1225 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1533 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1533 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1228 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1228 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1533-2 has no Hoare annotation [2018-11-23 10:58:16,692 WARN L170 areAnnotationChecker]: L1533-2 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1231 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1231 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1543 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1543 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1234 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1234 has no Hoare annotation [2018-11-23 10:58:16,693 WARN L170 areAnnotationChecker]: L1543-2 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1561 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1561 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1237 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1237 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1561-2 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1561-2 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1584 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1584 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1240 has no Hoare annotation [2018-11-23 10:58:16,694 WARN L170 areAnnotationChecker]: L1240 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1574 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1574 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1588 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1588 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1587 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1587 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1244 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1593 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1593 has no Hoare annotation [2018-11-23 10:58:16,695 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1599 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1599 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1613 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1613 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1609-1 has no Hoare annotation [2018-11-23 10:58:16,696 WARN L170 areAnnotationChecker]: L1599-2 has no Hoare annotation [2018-11-23 10:58:16,696 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 10:58:16,700 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 10:58:16 BoogieIcfgContainer [2018-11-23 10:58:16,700 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 10:58:16,700 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 10:58:16,700 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 10:58:16,701 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 10:58:16,701 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:57:34" (3/4) ... [2018-11-23 10:58:16,704 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #607#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv7 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv7 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem14.base|=(_ bv0 32), |ssl3_accept_#t~mem14.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem17.base|=(_ bv1 32), |ssl3_accept_#t~mem17.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem68|=(_ bv256 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != #t~mem68;havoc #t~mem68;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8656bv32 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem116.base, #t~mem116.offset;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 5bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32);~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem50|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem51|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8672bv32 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(4bv32 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 5bv32 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 10:58:16,847 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 10:58:16,847 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1552] havoc #t~mem116; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 10:58:16,990 INFO L145 WitnessManager]: Wrote witness to /storage/repos/svcomp/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c-witness.graphml [2018-11-23 10:58:16,990 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 10:58:16,991 INFO L168 Benchmark]: Toolchain (without parser) took 50521.38 ms. Allocated memory was 1.5 GB in the beginning and 2.6 GB in the end (delta: 1.1 GB). Free memory was 1.4 GB in the beginning and 2.3 GB in the end (delta: -853.6 MB). Peak memory consumption was 220.1 MB. Max. memory is 7.1 GB. [2018-11-23 10:58:16,993 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 10:58:16,993 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1082.41 ms. Allocated memory was 1.5 GB in the beginning and 2.2 GB in the end (delta: 719.8 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -749.1 MB). Peak memory consumption was 52.0 MB. Max. memory is 7.1 GB. [2018-11-23 10:58:16,993 INFO L168 Benchmark]: Boogie Procedure Inliner took 73.32 ms. Allocated memory is still 2.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 10:58:16,994 INFO L168 Benchmark]: Boogie Preprocessor took 176.35 ms. Allocated memory is still 2.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 10:58:16,994 INFO L168 Benchmark]: RCFGBuilder took 6735.95 ms. Allocated memory is still 2.2 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 148.7 MB). Peak memory consumption was 148.7 MB. Max. memory is 7.1 GB. [2018-11-23 10:58:16,994 INFO L168 Benchmark]: TraceAbstraction took 42158.48 ms. Allocated memory was 2.2 GB in the beginning and 2.6 GB in the end (delta: 353.9 MB). Free memory was 2.0 GB in the beginning and 2.4 GB in the end (delta: -344.1 MB). Peak memory consumption was 9.8 MB. Max. memory is 7.1 GB. [2018-11-23 10:58:16,994 INFO L168 Benchmark]: Witness Printer took 289.75 ms. Allocated memory is still 2.6 GB. Free memory was 2.4 GB in the beginning and 2.3 GB in the end (delta: 90.9 MB). Peak memory consumption was 90.9 MB. Max. memory is 7.1 GB. [2018-11-23 10:58:16,996 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1082.41 ms. Allocated memory was 1.5 GB in the beginning and 2.2 GB in the end (delta: 719.8 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -749.1 MB). Peak memory consumption was 52.0 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 73.32 ms. Allocated memory is still 2.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * Boogie Preprocessor took 176.35 ms. Allocated memory is still 2.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 6735.95 ms. Allocated memory is still 2.2 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 148.7 MB). Peak memory consumption was 148.7 MB. Max. memory is 7.1 GB. * TraceAbstraction took 42158.48 ms. Allocated memory was 2.2 GB in the beginning and 2.6 GB in the end (delta: 353.9 MB). Free memory was 2.0 GB in the beginning and 2.4 GB in the end (delta: -344.1 MB). Peak memory consumption was 9.8 MB. Max. memory is 7.1 GB. * Witness Printer took 289.75 ms. Allocated memory is still 2.6 GB. Free memory was 2.4 GB in the beginning and 2.3 GB in the end (delta: 90.9 MB). Peak memory consumption was 90.9 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1706]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 156 locations, 1 error locations. UNSAFE Result, 42.0s OverallTime, 5 OverallIterations, 4 TraceHistogramMax, 34.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 1372 SDtfs, 597 SDslu, 804 SDs, 0 SdLazy, 69 SolverSat, 20 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 336 GetRequests, 332 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=498occurred in iteration=3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.2s AutomataMinimizationTime, 4 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.2s SsaConstructionTime, 1.1s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 472 NumberOfCodeBlocks, 472 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 336 ConstructedInterpolants, 0 QuantifiedInterpolants, 60078 SizeOfPredicates, 4 NumberOfNonLiveVariables, 1165 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 153/153 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...