java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 10:58:38,986 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 10:58:38,988 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 10:58:39,000 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 10:58:39,000 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 10:58:39,001 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 10:58:39,002 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 10:58:39,004 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 10:58:39,005 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 10:58:39,006 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 10:58:39,007 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 10:58:39,008 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 10:58:39,008 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 10:58:39,009 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 10:58:39,011 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 10:58:39,011 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 10:58:39,012 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 10:58:39,014 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 10:58:39,016 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 10:58:39,018 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 10:58:39,019 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 10:58:39,020 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 10:58:39,022 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 10:58:39,023 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 10:58:39,023 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 10:58:39,024 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 10:58:39,025 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 10:58:39,026 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 10:58:39,027 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 10:58:39,028 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 10:58:39,028 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 10:58:39,029 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 10:58:39,029 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 10:58:39,029 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 10:58:39,030 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 10:58:39,031 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 10:58:39,031 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Bitvector.epf [2018-11-23 10:58:39,061 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 10:58:39,062 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 10:58:39,062 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 10:58:39,063 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 10:58:39,063 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 10:58:39,064 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 10:58:39,064 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 10:58:39,064 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 10:58:39,064 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 10:58:39,065 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 10:58:39,066 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 10:58:39,066 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 10:58:39,066 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 10:58:39,066 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 10:58:39,067 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 10:58:39,067 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 10:58:39,067 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 10:58:39,067 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 10:58:39,067 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 10:58:39,068 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 10:58:39,069 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 10:58:39,069 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 10:58:39,069 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 10:58:39,070 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 10:58:39,070 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 10:58:39,070 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 10:58:39,070 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 10:58:39,070 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 10:58:39,070 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 10:58:39,071 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 10:58:39,071 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 10:58:39,071 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 10:58:39,071 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 10:58:39,136 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 10:58:39,155 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 10:58:39,160 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 10:58:39,162 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 10:58:39,162 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 10:58:39,163 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 10:58:39,229 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9cab66e79/d38a9f6d80b94d589408cc2d5b384a5e/FLAG2ccabaa38 [2018-11-23 10:58:39,860 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 10:58:39,861 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 10:58:39,892 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9cab66e79/d38a9f6d80b94d589408cc2d5b384a5e/FLAG2ccabaa38 [2018-11-23 10:58:40,067 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9cab66e79/d38a9f6d80b94d589408cc2d5b384a5e [2018-11-23 10:58:40,077 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 10:58:40,078 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 10:58:40,079 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 10:58:40,079 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 10:58:40,083 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 10:58:40,085 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 10:58:40" (1/1) ... [2018-11-23 10:58:40,088 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3fcfa8b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:40, skipping insertion in model container [2018-11-23 10:58:40,088 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 10:58:40" (1/1) ... [2018-11-23 10:58:40,098 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 10:58:40,189 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 10:58:40,774 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 10:58:40,791 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 10:58:41,106 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 10:58:41,148 INFO L195 MainTranslator]: Completed translation [2018-11-23 10:58:41,149 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41 WrapperNode [2018-11-23 10:58:41,149 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 10:58:41,150 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 10:58:41,150 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 10:58:41,150 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 10:58:41,161 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,214 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,234 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 10:58:41,235 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 10:58:41,235 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 10:58:41,235 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 10:58:41,247 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,247 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,265 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,265 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,372 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,390 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,395 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... [2018-11-23 10:58:41,409 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 10:58:41,410 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 10:58:41,410 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 10:58:41,410 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 10:58:41,414 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 10:58:41,468 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 10:58:41,469 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 10:58:41,469 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 10:58:41,469 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 10:58:41,469 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 10:58:41,469 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 10:58:41,470 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 10:58:41,470 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 10:58:41,470 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 10:58:41,470 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 10:58:41,471 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 10:58:41,471 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 10:58:41,471 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 10:58:41,471 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 10:58:41,471 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 10:58:42,104 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 10:58:42,105 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 10:58:46,657 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 10:58:46,657 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 10:58:46,658 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:58:46 BoogieIcfgContainer [2018-11-23 10:58:46,658 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 10:58:46,659 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 10:58:46,659 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 10:58:46,663 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 10:58:46,663 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 10:58:40" (1/3) ... [2018-11-23 10:58:46,664 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d6db8ca and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 10:58:46, skipping insertion in model container [2018-11-23 10:58:46,664 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:58:41" (2/3) ... [2018-11-23 10:58:46,664 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d6db8ca and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 10:58:46, skipping insertion in model container [2018-11-23 10:58:46,665 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:58:46" (3/3) ... [2018-11-23 10:58:46,666 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 10:58:46,677 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 10:58:46,688 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 10:58:46,706 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 10:58:46,740 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 10:58:46,741 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 10:58:46,741 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 10:58:46,741 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 10:58:46,742 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 10:58:46,742 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 10:58:46,742 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 10:58:46,742 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 10:58:46,742 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 10:58:46,773 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states. [2018-11-23 10:58:46,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 10:58:46,786 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:58:46,788 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:58:46,790 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:58:46,795 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:58:46,795 INFO L82 PathProgramCache]: Analyzing trace with hash -995657757, now seen corresponding path program 1 times [2018-11-23 10:58:46,801 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:58:46,802 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:58:46,821 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:58:46,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:58:46,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:58:47,001 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:58:47,422 INFO L256 TraceCheckUtils]: 0: Hoare triple {160#true} call ULTIMATE.init(); {160#true} is VALID [2018-11-23 10:58:47,427 INFO L273 TraceCheckUtils]: 1: Hoare triple {160#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {160#true} is VALID [2018-11-23 10:58:47,428 INFO L273 TraceCheckUtils]: 2: Hoare triple {160#true} assume true; {160#true} is VALID [2018-11-23 10:58:47,428 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {160#true} {160#true} #633#return; {160#true} is VALID [2018-11-23 10:58:47,429 INFO L256 TraceCheckUtils]: 4: Hoare triple {160#true} call #t~ret138 := main(); {160#true} is VALID [2018-11-23 10:58:47,429 INFO L273 TraceCheckUtils]: 5: Hoare triple {160#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {160#true} is VALID [2018-11-23 10:58:47,430 INFO L256 TraceCheckUtils]: 6: Hoare triple {160#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {160#true} is VALID [2018-11-23 10:58:47,443 INFO L273 TraceCheckUtils]: 7: Hoare triple {160#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,456 INFO L273 TraceCheckUtils]: 8: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,468 INFO L273 TraceCheckUtils]: 9: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,469 INFO L273 TraceCheckUtils]: 10: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,471 INFO L273 TraceCheckUtils]: 11: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,471 INFO L273 TraceCheckUtils]: 12: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,474 INFO L273 TraceCheckUtils]: 13: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !false; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,483 INFO L273 TraceCheckUtils]: 14: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,495 INFO L273 TraceCheckUtils]: 15: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,508 INFO L273 TraceCheckUtils]: 16: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,509 INFO L273 TraceCheckUtils]: 17: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,510 INFO L273 TraceCheckUtils]: 18: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,510 INFO L273 TraceCheckUtils]: 19: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,511 INFO L273 TraceCheckUtils]: 20: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,512 INFO L273 TraceCheckUtils]: 21: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,520 INFO L273 TraceCheckUtils]: 22: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,532 INFO L273 TraceCheckUtils]: 23: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,541 INFO L273 TraceCheckUtils]: 24: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,548 INFO L273 TraceCheckUtils]: 25: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,548 INFO L273 TraceCheckUtils]: 26: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,551 INFO L273 TraceCheckUtils]: 27: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,553 INFO L273 TraceCheckUtils]: 28: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,555 INFO L273 TraceCheckUtils]: 29: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,558 INFO L273 TraceCheckUtils]: 30: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,558 INFO L273 TraceCheckUtils]: 31: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,560 INFO L273 TraceCheckUtils]: 32: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 8544bv32 == #t~mem41;havoc #t~mem41; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,560 INFO L273 TraceCheckUtils]: 33: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,561 INFO L273 TraceCheckUtils]: 34: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,562 INFO L273 TraceCheckUtils]: 35: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,562 INFO L273 TraceCheckUtils]: 36: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,563 INFO L273 TraceCheckUtils]: 37: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,563 INFO L273 TraceCheckUtils]: 38: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:47,564 INFO L273 TraceCheckUtils]: 39: Hoare triple {186#(= (_ bv0 32) ssl3_accept_~blastFlag~0)} assume 7bv32 == ~blastFlag~0; {161#false} is VALID [2018-11-23 10:58:47,565 INFO L273 TraceCheckUtils]: 40: Hoare triple {161#false} assume !false; {161#false} is VALID [2018-11-23 10:58:47,577 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 10:58:47,577 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:58:47,584 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:58:47,585 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:58:47,590 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 41 [2018-11-23 10:58:47,600 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:58:47,605 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:58:47,864 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:58:47,864 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:58:47,874 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:58:47,875 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:58:47,878 INFO L87 Difference]: Start difference. First operand 157 states. Second operand 3 states. [2018-11-23 10:58:52,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:52,941 INFO L93 Difference]: Finished difference Result 435 states and 736 transitions. [2018-11-23 10:58:52,941 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:58:52,942 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 41 [2018-11-23 10:58:52,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:58:52,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:58:52,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 736 transitions. [2018-11-23 10:58:52,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:58:52,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 736 transitions. [2018-11-23 10:58:52,991 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 736 transitions. [2018-11-23 10:58:54,572 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 736 edges. 736 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:58:54,610 INFO L225 Difference]: With dead ends: 435 [2018-11-23 10:58:54,610 INFO L226 Difference]: Without dead ends: 265 [2018-11-23 10:58:54,617 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:58:54,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2018-11-23 10:58:54,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 265. [2018-11-23 10:58:54,821 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:58:54,821 INFO L82 GeneralOperation]: Start isEquivalent. First operand 265 states. Second operand 265 states. [2018-11-23 10:58:54,822 INFO L74 IsIncluded]: Start isIncluded. First operand 265 states. Second operand 265 states. [2018-11-23 10:58:54,822 INFO L87 Difference]: Start difference. First operand 265 states. Second operand 265 states. [2018-11-23 10:58:54,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:54,836 INFO L93 Difference]: Finished difference Result 265 states and 397 transitions. [2018-11-23 10:58:54,836 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 397 transitions. [2018-11-23 10:58:54,839 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:58:54,840 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:58:54,840 INFO L74 IsIncluded]: Start isIncluded. First operand 265 states. Second operand 265 states. [2018-11-23 10:58:54,840 INFO L87 Difference]: Start difference. First operand 265 states. Second operand 265 states. [2018-11-23 10:58:54,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:58:54,854 INFO L93 Difference]: Finished difference Result 265 states and 397 transitions. [2018-11-23 10:58:54,854 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 397 transitions. [2018-11-23 10:58:54,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:58:54,857 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:58:54,857 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:58:54,857 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:58:54,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 265 states. [2018-11-23 10:58:54,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 397 transitions. [2018-11-23 10:58:54,871 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 397 transitions. Word has length 41 [2018-11-23 10:58:54,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:58:54,872 INFO L480 AbstractCegarLoop]: Abstraction has 265 states and 397 transitions. [2018-11-23 10:58:54,872 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:58:54,872 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 397 transitions. [2018-11-23 10:58:54,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 10:58:54,875 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:58:54,875 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:58:54,875 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:58:54,875 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:58:54,876 INFO L82 PathProgramCache]: Analyzing trace with hash -623975095, now seen corresponding path program 1 times [2018-11-23 10:58:54,877 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:58:54,877 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:58:54,904 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:58:55,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:58:55,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:58:55,050 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:58:55,187 INFO L256 TraceCheckUtils]: 0: Hoare triple {1649#true} call ULTIMATE.init(); {1649#true} is VALID [2018-11-23 10:58:55,188 INFO L273 TraceCheckUtils]: 1: Hoare triple {1649#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,188 INFO L273 TraceCheckUtils]: 2: Hoare triple {1649#true} assume true; {1649#true} is VALID [2018-11-23 10:58:55,188 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1649#true} {1649#true} #633#return; {1649#true} is VALID [2018-11-23 10:58:55,189 INFO L256 TraceCheckUtils]: 4: Hoare triple {1649#true} call #t~ret138 := main(); {1649#true} is VALID [2018-11-23 10:58:55,189 INFO L273 TraceCheckUtils]: 5: Hoare triple {1649#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,189 INFO L256 TraceCheckUtils]: 6: Hoare triple {1649#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1649#true} is VALID [2018-11-23 10:58:55,190 INFO L273 TraceCheckUtils]: 7: Hoare triple {1649#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,190 INFO L273 TraceCheckUtils]: 8: Hoare triple {1649#true} assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1649#true} is VALID [2018-11-23 10:58:55,191 INFO L273 TraceCheckUtils]: 9: Hoare triple {1649#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {1649#true} is VALID [2018-11-23 10:58:55,191 INFO L273 TraceCheckUtils]: 10: Hoare triple {1649#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {1649#true} is VALID [2018-11-23 10:58:55,191 INFO L273 TraceCheckUtils]: 11: Hoare triple {1649#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,192 INFO L273 TraceCheckUtils]: 12: Hoare triple {1649#true} assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; {1649#true} is VALID [2018-11-23 10:58:55,192 INFO L273 TraceCheckUtils]: 13: Hoare triple {1649#true} assume !false; {1649#true} is VALID [2018-11-23 10:58:55,192 INFO L273 TraceCheckUtils]: 14: Hoare triple {1649#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,193 INFO L273 TraceCheckUtils]: 15: Hoare triple {1649#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,193 INFO L273 TraceCheckUtils]: 16: Hoare triple {1649#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,193 INFO L273 TraceCheckUtils]: 17: Hoare triple {1649#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,194 INFO L273 TraceCheckUtils]: 18: Hoare triple {1649#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,194 INFO L273 TraceCheckUtils]: 19: Hoare triple {1649#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,194 INFO L273 TraceCheckUtils]: 20: Hoare triple {1649#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,195 INFO L273 TraceCheckUtils]: 21: Hoare triple {1649#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,195 INFO L273 TraceCheckUtils]: 22: Hoare triple {1649#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1649#true} is VALID [2018-11-23 10:58:55,195 INFO L273 TraceCheckUtils]: 23: Hoare triple {1649#true} assume 8464bv32 == #t~mem32;havoc #t~mem32; {1649#true} is VALID [2018-11-23 10:58:55,196 INFO L273 TraceCheckUtils]: 24: Hoare triple {1649#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {1649#true} is VALID [2018-11-23 10:58:55,201 INFO L273 TraceCheckUtils]: 25: Hoare triple {1649#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,203 INFO L273 TraceCheckUtils]: 26: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,204 INFO L273 TraceCheckUtils]: 27: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,205 INFO L273 TraceCheckUtils]: 28: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,205 INFO L273 TraceCheckUtils]: 29: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,207 INFO L273 TraceCheckUtils]: 30: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !false; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,209 INFO L273 TraceCheckUtils]: 31: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,209 INFO L273 TraceCheckUtils]: 32: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,214 INFO L273 TraceCheckUtils]: 33: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,214 INFO L273 TraceCheckUtils]: 34: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,216 INFO L273 TraceCheckUtils]: 35: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,218 INFO L273 TraceCheckUtils]: 36: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,218 INFO L273 TraceCheckUtils]: 37: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,219 INFO L273 TraceCheckUtils]: 38: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,219 INFO L273 TraceCheckUtils]: 39: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,220 INFO L273 TraceCheckUtils]: 40: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,220 INFO L273 TraceCheckUtils]: 41: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,223 INFO L273 TraceCheckUtils]: 42: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,224 INFO L273 TraceCheckUtils]: 43: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,225 INFO L273 TraceCheckUtils]: 44: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,225 INFO L273 TraceCheckUtils]: 45: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,226 INFO L273 TraceCheckUtils]: 46: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,226 INFO L273 TraceCheckUtils]: 47: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,227 INFO L273 TraceCheckUtils]: 48: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,228 INFO L273 TraceCheckUtils]: 49: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume 8544bv32 == #t~mem41;havoc #t~mem41; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,228 INFO L273 TraceCheckUtils]: 50: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,229 INFO L273 TraceCheckUtils]: 51: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,230 INFO L273 TraceCheckUtils]: 52: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,231 INFO L273 TraceCheckUtils]: 53: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,231 INFO L273 TraceCheckUtils]: 54: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,232 INFO L273 TraceCheckUtils]: 55: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:58:55,233 INFO L273 TraceCheckUtils]: 56: Hoare triple {1729#(= (_ bv1 32) ssl3_accept_~blastFlag~0)} assume 7bv32 == ~blastFlag~0; {1650#false} is VALID [2018-11-23 10:58:55,233 INFO L273 TraceCheckUtils]: 57: Hoare triple {1650#false} assume !false; {1650#false} is VALID [2018-11-23 10:58:55,242 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 10:58:55,242 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:58:55,248 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:58:55,248 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:58:55,250 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2018-11-23 10:58:55,250 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:58:55,251 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:58:55,413 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:58:55,413 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:58:55,413 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:58:55,414 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:58:55,414 INFO L87 Difference]: Start difference. First operand 265 states and 397 transitions. Second operand 3 states. [2018-11-23 10:59:02,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:02,827 INFO L93 Difference]: Finished difference Result 514 states and 784 transitions. [2018-11-23 10:59:02,827 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:59:02,827 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2018-11-23 10:59:02,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:59:02,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:02,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 600 transitions. [2018-11-23 10:59:02,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:02,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 600 transitions. [2018-11-23 10:59:02,841 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 600 transitions. [2018-11-23 10:59:04,346 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 600 edges. 600 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:04,364 INFO L225 Difference]: With dead ends: 514 [2018-11-23 10:59:04,365 INFO L226 Difference]: Without dead ends: 387 [2018-11-23 10:59:04,367 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:04,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2018-11-23 10:59:04,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 387. [2018-11-23 10:59:04,552 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:59:04,552 INFO L82 GeneralOperation]: Start isEquivalent. First operand 387 states. Second operand 387 states. [2018-11-23 10:59:04,552 INFO L74 IsIncluded]: Start isIncluded. First operand 387 states. Second operand 387 states. [2018-11-23 10:59:04,552 INFO L87 Difference]: Start difference. First operand 387 states. Second operand 387 states. [2018-11-23 10:59:04,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:04,580 INFO L93 Difference]: Finished difference Result 387 states and 578 transitions. [2018-11-23 10:59:04,580 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 578 transitions. [2018-11-23 10:59:04,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:04,581 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:04,582 INFO L74 IsIncluded]: Start isIncluded. First operand 387 states. Second operand 387 states. [2018-11-23 10:59:04,582 INFO L87 Difference]: Start difference. First operand 387 states. Second operand 387 states. [2018-11-23 10:59:04,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:04,607 INFO L93 Difference]: Finished difference Result 387 states and 578 transitions. [2018-11-23 10:59:04,608 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 578 transitions. [2018-11-23 10:59:04,609 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:04,609 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:04,609 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:59:04,609 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:59:04,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 387 states. [2018-11-23 10:59:04,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 387 states to 387 states and 578 transitions. [2018-11-23 10:59:04,635 INFO L78 Accepts]: Start accepts. Automaton has 387 states and 578 transitions. Word has length 58 [2018-11-23 10:59:04,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:59:04,635 INFO L480 AbstractCegarLoop]: Abstraction has 387 states and 578 transitions. [2018-11-23 10:59:04,635 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:59:04,635 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 578 transitions. [2018-11-23 10:59:04,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 10:59:04,638 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:59:04,638 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:59:04,639 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:59:04,639 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:59:04,639 INFO L82 PathProgramCache]: Analyzing trace with hash 1440674399, now seen corresponding path program 1 times [2018-11-23 10:59:04,640 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:59:04,640 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:59:04,668 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:59:04,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:04,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:04,826 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:59:04,947 INFO L256 TraceCheckUtils]: 0: Hoare triple {3669#true} call ULTIMATE.init(); {3669#true} is VALID [2018-11-23 10:59:04,947 INFO L273 TraceCheckUtils]: 1: Hoare triple {3669#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,948 INFO L273 TraceCheckUtils]: 2: Hoare triple {3669#true} assume true; {3669#true} is VALID [2018-11-23 10:59:04,948 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3669#true} {3669#true} #633#return; {3669#true} is VALID [2018-11-23 10:59:04,949 INFO L256 TraceCheckUtils]: 4: Hoare triple {3669#true} call #t~ret138 := main(); {3669#true} is VALID [2018-11-23 10:59:04,949 INFO L273 TraceCheckUtils]: 5: Hoare triple {3669#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,950 INFO L256 TraceCheckUtils]: 6: Hoare triple {3669#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3669#true} is VALID [2018-11-23 10:59:04,950 INFO L273 TraceCheckUtils]: 7: Hoare triple {3669#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,950 INFO L273 TraceCheckUtils]: 8: Hoare triple {3669#true} assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3669#true} is VALID [2018-11-23 10:59:04,951 INFO L273 TraceCheckUtils]: 9: Hoare triple {3669#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {3669#true} is VALID [2018-11-23 10:59:04,951 INFO L273 TraceCheckUtils]: 10: Hoare triple {3669#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {3669#true} is VALID [2018-11-23 10:59:04,951 INFO L273 TraceCheckUtils]: 11: Hoare triple {3669#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,952 INFO L273 TraceCheckUtils]: 12: Hoare triple {3669#true} assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; {3669#true} is VALID [2018-11-23 10:59:04,952 INFO L273 TraceCheckUtils]: 13: Hoare triple {3669#true} assume !false; {3669#true} is VALID [2018-11-23 10:59:04,952 INFO L273 TraceCheckUtils]: 14: Hoare triple {3669#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,952 INFO L273 TraceCheckUtils]: 15: Hoare triple {3669#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,954 INFO L273 TraceCheckUtils]: 16: Hoare triple {3669#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,954 INFO L273 TraceCheckUtils]: 17: Hoare triple {3669#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,954 INFO L273 TraceCheckUtils]: 18: Hoare triple {3669#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,955 INFO L273 TraceCheckUtils]: 19: Hoare triple {3669#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,955 INFO L273 TraceCheckUtils]: 20: Hoare triple {3669#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,955 INFO L273 TraceCheckUtils]: 21: Hoare triple {3669#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,956 INFO L273 TraceCheckUtils]: 22: Hoare triple {3669#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,956 INFO L273 TraceCheckUtils]: 23: Hoare triple {3669#true} assume 8464bv32 == #t~mem32;havoc #t~mem32; {3669#true} is VALID [2018-11-23 10:59:04,956 INFO L273 TraceCheckUtils]: 24: Hoare triple {3669#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {3669#true} is VALID [2018-11-23 10:59:04,957 INFO L273 TraceCheckUtils]: 25: Hoare triple {3669#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {3669#true} is VALID [2018-11-23 10:59:04,957 INFO L273 TraceCheckUtils]: 26: Hoare triple {3669#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,957 INFO L273 TraceCheckUtils]: 27: Hoare triple {3669#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,958 INFO L273 TraceCheckUtils]: 28: Hoare triple {3669#true} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {3669#true} is VALID [2018-11-23 10:59:04,958 INFO L273 TraceCheckUtils]: 29: Hoare triple {3669#true} ~skip~0 := 0bv32; {3669#true} is VALID [2018-11-23 10:59:04,958 INFO L273 TraceCheckUtils]: 30: Hoare triple {3669#true} assume !false; {3669#true} is VALID [2018-11-23 10:59:04,959 INFO L273 TraceCheckUtils]: 31: Hoare triple {3669#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,959 INFO L273 TraceCheckUtils]: 32: Hoare triple {3669#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,959 INFO L273 TraceCheckUtils]: 33: Hoare triple {3669#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,959 INFO L273 TraceCheckUtils]: 34: Hoare triple {3669#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,960 INFO L273 TraceCheckUtils]: 35: Hoare triple {3669#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,960 INFO L273 TraceCheckUtils]: 36: Hoare triple {3669#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,960 INFO L273 TraceCheckUtils]: 37: Hoare triple {3669#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,960 INFO L273 TraceCheckUtils]: 38: Hoare triple {3669#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,961 INFO L273 TraceCheckUtils]: 39: Hoare triple {3669#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,961 INFO L273 TraceCheckUtils]: 40: Hoare triple {3669#true} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,961 INFO L273 TraceCheckUtils]: 41: Hoare triple {3669#true} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,962 INFO L273 TraceCheckUtils]: 42: Hoare triple {3669#true} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3669#true} is VALID [2018-11-23 10:59:04,962 INFO L273 TraceCheckUtils]: 43: Hoare triple {3669#true} assume 8496bv32 == #t~mem35;havoc #t~mem35; {3669#true} is VALID [2018-11-23 10:59:04,962 INFO L273 TraceCheckUtils]: 44: Hoare triple {3669#true} ~ret~0 := #t~nondet70;havoc #t~nondet70; {3669#true} is VALID [2018-11-23 10:59:04,971 INFO L273 TraceCheckUtils]: 45: Hoare triple {3669#true} assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,972 INFO L273 TraceCheckUtils]: 46: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,973 INFO L273 TraceCheckUtils]: 47: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != #t~mem71;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,973 INFO L273 TraceCheckUtils]: 48: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,982 INFO L273 TraceCheckUtils]: 49: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,992 INFO L273 TraceCheckUtils]: 50: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,994 INFO L273 TraceCheckUtils]: 51: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,994 INFO L273 TraceCheckUtils]: 52: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !false; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,996 INFO L273 TraceCheckUtils]: 53: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,996 INFO L273 TraceCheckUtils]: 54: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,998 INFO L273 TraceCheckUtils]: 55: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:04,998 INFO L273 TraceCheckUtils]: 56: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,000 INFO L273 TraceCheckUtils]: 57: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,000 INFO L273 TraceCheckUtils]: 58: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,002 INFO L273 TraceCheckUtils]: 59: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,002 INFO L273 TraceCheckUtils]: 60: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,004 INFO L273 TraceCheckUtils]: 61: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,004 INFO L273 TraceCheckUtils]: 62: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,006 INFO L273 TraceCheckUtils]: 63: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,006 INFO L273 TraceCheckUtils]: 64: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,008 INFO L273 TraceCheckUtils]: 65: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,008 INFO L273 TraceCheckUtils]: 66: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,010 INFO L273 TraceCheckUtils]: 67: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,010 INFO L273 TraceCheckUtils]: 68: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,011 INFO L273 TraceCheckUtils]: 69: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,011 INFO L273 TraceCheckUtils]: 70: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,011 INFO L273 TraceCheckUtils]: 71: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 8544bv32 == #t~mem41;havoc #t~mem41; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,012 INFO L273 TraceCheckUtils]: 72: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,012 INFO L273 TraceCheckUtils]: 73: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,012 INFO L273 TraceCheckUtils]: 74: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,013 INFO L273 TraceCheckUtils]: 75: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,013 INFO L273 TraceCheckUtils]: 76: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,014 INFO L273 TraceCheckUtils]: 77: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:05,015 INFO L273 TraceCheckUtils]: 78: Hoare triple {3809#(= (_ bv2 32) ssl3_accept_~blastFlag~0)} assume 7bv32 == ~blastFlag~0; {3670#false} is VALID [2018-11-23 10:59:05,015 INFO L273 TraceCheckUtils]: 79: Hoare triple {3670#false} assume !false; {3670#false} is VALID [2018-11-23 10:59:05,022 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 10:59:05,022 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:59:05,032 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:59:05,032 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:59:05,033 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 80 [2018-11-23 10:59:05,033 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:59:05,033 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:59:05,152 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:05,152 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:59:05,153 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:59:05,153 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:05,153 INFO L87 Difference]: Start difference. First operand 387 states and 578 transitions. Second operand 3 states. [2018-11-23 10:59:11,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:11,608 INFO L93 Difference]: Finished difference Result 758 states and 1147 transitions. [2018-11-23 10:59:11,608 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:59:11,608 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 80 [2018-11-23 10:59:11,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:59:11,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:11,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 601 transitions. [2018-11-23 10:59:11,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:11,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 601 transitions. [2018-11-23 10:59:11,621 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 601 transitions. [2018-11-23 10:59:12,596 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 601 edges. 601 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:12,619 INFO L225 Difference]: With dead ends: 758 [2018-11-23 10:59:12,619 INFO L226 Difference]: Without dead ends: 509 [2018-11-23 10:59:12,621 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:12,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 509 states. [2018-11-23 10:59:12,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 509 to 509. [2018-11-23 10:59:12,993 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:59:12,994 INFO L82 GeneralOperation]: Start isEquivalent. First operand 509 states. Second operand 509 states. [2018-11-23 10:59:12,994 INFO L74 IsIncluded]: Start isIncluded. First operand 509 states. Second operand 509 states. [2018-11-23 10:59:12,994 INFO L87 Difference]: Start difference. First operand 509 states. Second operand 509 states. [2018-11-23 10:59:13,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:13,014 INFO L93 Difference]: Finished difference Result 509 states and 760 transitions. [2018-11-23 10:59:13,014 INFO L276 IsEmpty]: Start isEmpty. Operand 509 states and 760 transitions. [2018-11-23 10:59:13,015 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:13,016 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:13,016 INFO L74 IsIncluded]: Start isIncluded. First operand 509 states. Second operand 509 states. [2018-11-23 10:59:13,016 INFO L87 Difference]: Start difference. First operand 509 states. Second operand 509 states. [2018-11-23 10:59:13,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:13,035 INFO L93 Difference]: Finished difference Result 509 states and 760 transitions. [2018-11-23 10:59:13,035 INFO L276 IsEmpty]: Start isEmpty. Operand 509 states and 760 transitions. [2018-11-23 10:59:13,036 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:13,036 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:13,037 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:59:13,037 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:59:13,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 509 states. [2018-11-23 10:59:13,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 509 states to 509 states and 760 transitions. [2018-11-23 10:59:13,058 INFO L78 Accepts]: Start accepts. Automaton has 509 states and 760 transitions. Word has length 80 [2018-11-23 10:59:13,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:59:13,058 INFO L480 AbstractCegarLoop]: Abstraction has 509 states and 760 transitions. [2018-11-23 10:59:13,059 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:59:13,059 INFO L276 IsEmpty]: Start isEmpty. Operand 509 states and 760 transitions. [2018-11-23 10:59:13,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 10:59:13,061 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:59:13,061 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:59:13,062 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:59:13,062 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:59:13,062 INFO L82 PathProgramCache]: Analyzing trace with hash -1543049171, now seen corresponding path program 1 times [2018-11-23 10:59:13,063 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:59:13,063 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:59:13,093 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:59:13,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:13,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:13,284 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:59:13,991 INFO L256 TraceCheckUtils]: 0: Hoare triple {6431#true} call ULTIMATE.init(); {6431#true} is VALID [2018-11-23 10:59:13,991 INFO L273 TraceCheckUtils]: 1: Hoare triple {6431#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,991 INFO L273 TraceCheckUtils]: 2: Hoare triple {6431#true} assume true; {6431#true} is VALID [2018-11-23 10:59:13,991 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6431#true} {6431#true} #633#return; {6431#true} is VALID [2018-11-23 10:59:13,992 INFO L256 TraceCheckUtils]: 4: Hoare triple {6431#true} call #t~ret138 := main(); {6431#true} is VALID [2018-11-23 10:59:13,992 INFO L273 TraceCheckUtils]: 5: Hoare triple {6431#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,992 INFO L256 TraceCheckUtils]: 6: Hoare triple {6431#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6431#true} is VALID [2018-11-23 10:59:13,992 INFO L273 TraceCheckUtils]: 7: Hoare triple {6431#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,992 INFO L273 TraceCheckUtils]: 8: Hoare triple {6431#true} assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6431#true} is VALID [2018-11-23 10:59:13,993 INFO L273 TraceCheckUtils]: 9: Hoare triple {6431#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {6431#true} is VALID [2018-11-23 10:59:13,993 INFO L273 TraceCheckUtils]: 10: Hoare triple {6431#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {6431#true} is VALID [2018-11-23 10:59:13,993 INFO L273 TraceCheckUtils]: 11: Hoare triple {6431#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,993 INFO L273 TraceCheckUtils]: 12: Hoare triple {6431#true} assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; {6431#true} is VALID [2018-11-23 10:59:13,994 INFO L273 TraceCheckUtils]: 13: Hoare triple {6431#true} assume !false; {6431#true} is VALID [2018-11-23 10:59:13,994 INFO L273 TraceCheckUtils]: 14: Hoare triple {6431#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,994 INFO L273 TraceCheckUtils]: 15: Hoare triple {6431#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,994 INFO L273 TraceCheckUtils]: 16: Hoare triple {6431#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,995 INFO L273 TraceCheckUtils]: 17: Hoare triple {6431#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,995 INFO L273 TraceCheckUtils]: 18: Hoare triple {6431#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,995 INFO L273 TraceCheckUtils]: 19: Hoare triple {6431#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,995 INFO L273 TraceCheckUtils]: 20: Hoare triple {6431#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,995 INFO L273 TraceCheckUtils]: 21: Hoare triple {6431#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,996 INFO L273 TraceCheckUtils]: 22: Hoare triple {6431#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,996 INFO L273 TraceCheckUtils]: 23: Hoare triple {6431#true} assume 8464bv32 == #t~mem32;havoc #t~mem32; {6431#true} is VALID [2018-11-23 10:59:13,996 INFO L273 TraceCheckUtils]: 24: Hoare triple {6431#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {6431#true} is VALID [2018-11-23 10:59:13,996 INFO L273 TraceCheckUtils]: 25: Hoare triple {6431#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {6431#true} is VALID [2018-11-23 10:59:13,997 INFO L273 TraceCheckUtils]: 26: Hoare triple {6431#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,997 INFO L273 TraceCheckUtils]: 27: Hoare triple {6431#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,997 INFO L273 TraceCheckUtils]: 28: Hoare triple {6431#true} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6431#true} is VALID [2018-11-23 10:59:13,997 INFO L273 TraceCheckUtils]: 29: Hoare triple {6431#true} ~skip~0 := 0bv32; {6431#true} is VALID [2018-11-23 10:59:13,998 INFO L273 TraceCheckUtils]: 30: Hoare triple {6431#true} assume !false; {6431#true} is VALID [2018-11-23 10:59:13,998 INFO L273 TraceCheckUtils]: 31: Hoare triple {6431#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,998 INFO L273 TraceCheckUtils]: 32: Hoare triple {6431#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,998 INFO L273 TraceCheckUtils]: 33: Hoare triple {6431#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,999 INFO L273 TraceCheckUtils]: 34: Hoare triple {6431#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,999 INFO L273 TraceCheckUtils]: 35: Hoare triple {6431#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,999 INFO L273 TraceCheckUtils]: 36: Hoare triple {6431#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:13,999 INFO L273 TraceCheckUtils]: 37: Hoare triple {6431#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,000 INFO L273 TraceCheckUtils]: 38: Hoare triple {6431#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,000 INFO L273 TraceCheckUtils]: 39: Hoare triple {6431#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,000 INFO L273 TraceCheckUtils]: 40: Hoare triple {6431#true} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,000 INFO L273 TraceCheckUtils]: 41: Hoare triple {6431#true} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,000 INFO L273 TraceCheckUtils]: 42: Hoare triple {6431#true} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,001 INFO L273 TraceCheckUtils]: 43: Hoare triple {6431#true} assume 8496bv32 == #t~mem35;havoc #t~mem35; {6431#true} is VALID [2018-11-23 10:59:14,001 INFO L273 TraceCheckUtils]: 44: Hoare triple {6431#true} ~ret~0 := #t~nondet70;havoc #t~nondet70; {6431#true} is VALID [2018-11-23 10:59:14,001 INFO L273 TraceCheckUtils]: 45: Hoare triple {6431#true} assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; {6431#true} is VALID [2018-11-23 10:59:14,001 INFO L273 TraceCheckUtils]: 46: Hoare triple {6431#true} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,002 INFO L273 TraceCheckUtils]: 47: Hoare triple {6431#true} assume 0bv32 != #t~mem71;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,002 INFO L273 TraceCheckUtils]: 48: Hoare triple {6431#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,002 INFO L273 TraceCheckUtils]: 49: Hoare triple {6431#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,002 INFO L273 TraceCheckUtils]: 50: Hoare triple {6431#true} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6431#true} is VALID [2018-11-23 10:59:14,002 INFO L273 TraceCheckUtils]: 51: Hoare triple {6431#true} ~skip~0 := 0bv32; {6431#true} is VALID [2018-11-23 10:59:14,003 INFO L273 TraceCheckUtils]: 52: Hoare triple {6431#true} assume !false; {6431#true} is VALID [2018-11-23 10:59:14,003 INFO L273 TraceCheckUtils]: 53: Hoare triple {6431#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,003 INFO L273 TraceCheckUtils]: 54: Hoare triple {6431#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,003 INFO L273 TraceCheckUtils]: 55: Hoare triple {6431#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,004 INFO L273 TraceCheckUtils]: 56: Hoare triple {6431#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,004 INFO L273 TraceCheckUtils]: 57: Hoare triple {6431#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,004 INFO L273 TraceCheckUtils]: 58: Hoare triple {6431#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,004 INFO L273 TraceCheckUtils]: 59: Hoare triple {6431#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,005 INFO L273 TraceCheckUtils]: 60: Hoare triple {6431#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,005 INFO L273 TraceCheckUtils]: 61: Hoare triple {6431#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,005 INFO L273 TraceCheckUtils]: 62: Hoare triple {6431#true} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,005 INFO L273 TraceCheckUtils]: 63: Hoare triple {6431#true} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,005 INFO L273 TraceCheckUtils]: 64: Hoare triple {6431#true} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,006 INFO L273 TraceCheckUtils]: 65: Hoare triple {6431#true} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,006 INFO L273 TraceCheckUtils]: 66: Hoare triple {6431#true} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,006 INFO L273 TraceCheckUtils]: 67: Hoare triple {6431#true} assume 8512bv32 == #t~mem37;havoc #t~mem37; {6431#true} is VALID [2018-11-23 10:59:14,006 INFO L273 TraceCheckUtils]: 68: Hoare triple {6431#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32);call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); {6431#true} is VALID [2018-11-23 10:59:14,007 INFO L273 TraceCheckUtils]: 69: Hoare triple {6431#true} assume !(0bv32 != ~bvand32(256bv32, #t~mem74));havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;~ret~0 := #t~nondet75;havoc #t~nondet75; {6431#true} is VALID [2018-11-23 10:59:14,017 INFO L273 TraceCheckUtils]: 70: Hoare triple {6431#true} assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 6bv32; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,019 INFO L273 TraceCheckUtils]: 71: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,019 INFO L273 TraceCheckUtils]: 72: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,020 INFO L273 TraceCheckUtils]: 73: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,021 INFO L273 TraceCheckUtils]: 74: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,024 INFO L273 TraceCheckUtils]: 75: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,028 INFO L273 TraceCheckUtils]: 76: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !false; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,030 INFO L273 TraceCheckUtils]: 77: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,032 INFO L273 TraceCheckUtils]: 78: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,032 INFO L273 TraceCheckUtils]: 79: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,033 INFO L273 TraceCheckUtils]: 80: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,033 INFO L273 TraceCheckUtils]: 81: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,034 INFO L273 TraceCheckUtils]: 82: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,034 INFO L273 TraceCheckUtils]: 83: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,035 INFO L273 TraceCheckUtils]: 84: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,035 INFO L273 TraceCheckUtils]: 85: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,037 INFO L273 TraceCheckUtils]: 86: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,037 INFO L273 TraceCheckUtils]: 87: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,040 INFO L273 TraceCheckUtils]: 88: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,040 INFO L273 TraceCheckUtils]: 89: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,043 INFO L273 TraceCheckUtils]: 90: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,043 INFO L273 TraceCheckUtils]: 91: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,045 INFO L273 TraceCheckUtils]: 92: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,046 INFO L273 TraceCheckUtils]: 93: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,049 INFO L273 TraceCheckUtils]: 94: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,049 INFO L273 TraceCheckUtils]: 95: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume 8544bv32 == #t~mem41;havoc #t~mem41; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,052 INFO L273 TraceCheckUtils]: 96: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,054 INFO L273 TraceCheckUtils]: 97: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,054 INFO L273 TraceCheckUtils]: 98: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,056 INFO L273 TraceCheckUtils]: 99: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,056 INFO L273 TraceCheckUtils]: 100: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,056 INFO L273 TraceCheckUtils]: 101: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:14,057 INFO L273 TraceCheckUtils]: 102: Hoare triple {6646#(= (_ bv6 32) ssl3_accept_~blastFlag~0)} assume 7bv32 == ~blastFlag~0; {6432#false} is VALID [2018-11-23 10:59:14,057 INFO L273 TraceCheckUtils]: 103: Hoare triple {6432#false} assume !false; {6432#false} is VALID [2018-11-23 10:59:14,062 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 10:59:14,062 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:59:14,064 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:59:14,066 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:59:14,066 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 10:59:14,067 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:59:14,067 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:59:14,184 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:14,185 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:59:14,185 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:59:14,185 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:14,185 INFO L87 Difference]: Start difference. First operand 509 states and 760 transitions. Second operand 3 states. [2018-11-23 10:59:20,161 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:20,161 INFO L93 Difference]: Finished difference Result 1004 states and 1513 transitions. [2018-11-23 10:59:20,161 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:59:20,161 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 10:59:20,162 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:59:20,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:20,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-23 10:59:20,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:20,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-23 10:59:20,174 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 603 transitions. [2018-11-23 10:59:21,419 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:21,448 INFO L225 Difference]: With dead ends: 1004 [2018-11-23 10:59:21,448 INFO L226 Difference]: Without dead ends: 633 [2018-11-23 10:59:21,449 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:21,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2018-11-23 10:59:21,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 633. [2018-11-23 10:59:21,853 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:59:21,853 INFO L82 GeneralOperation]: Start isEquivalent. First operand 633 states. Second operand 633 states. [2018-11-23 10:59:21,853 INFO L74 IsIncluded]: Start isIncluded. First operand 633 states. Second operand 633 states. [2018-11-23 10:59:21,853 INFO L87 Difference]: Start difference. First operand 633 states. Second operand 633 states. [2018-11-23 10:59:21,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:21,877 INFO L93 Difference]: Finished difference Result 633 states and 944 transitions. [2018-11-23 10:59:21,877 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 944 transitions. [2018-11-23 10:59:21,879 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:21,879 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:21,879 INFO L74 IsIncluded]: Start isIncluded. First operand 633 states. Second operand 633 states. [2018-11-23 10:59:21,879 INFO L87 Difference]: Start difference. First operand 633 states. Second operand 633 states. [2018-11-23 10:59:21,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:21,906 INFO L93 Difference]: Finished difference Result 633 states and 944 transitions. [2018-11-23 10:59:21,906 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 944 transitions. [2018-11-23 10:59:21,908 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:21,908 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:21,908 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:59:21,908 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:59:21,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 633 states. [2018-11-23 10:59:21,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 944 transitions. [2018-11-23 10:59:21,938 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 944 transitions. Word has length 104 [2018-11-23 10:59:21,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:59:21,939 INFO L480 AbstractCegarLoop]: Abstraction has 633 states and 944 transitions. [2018-11-23 10:59:21,939 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:59:21,939 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 944 transitions. [2018-11-23 10:59:21,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 10:59:21,941 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:59:21,941 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:59:21,942 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:59:21,942 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:59:21,942 INFO L82 PathProgramCache]: Analyzing trace with hash -2060309453, now seen corresponding path program 1 times [2018-11-23 10:59:21,943 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:59:21,943 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:59:21,973 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:59:22,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:22,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:22,189 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:59:22,809 INFO L256 TraceCheckUtils]: 0: Hoare triple {9949#true} call ULTIMATE.init(); {9949#true} is VALID [2018-11-23 10:59:22,809 INFO L273 TraceCheckUtils]: 1: Hoare triple {9949#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,809 INFO L273 TraceCheckUtils]: 2: Hoare triple {9949#true} assume true; {9949#true} is VALID [2018-11-23 10:59:22,809 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9949#true} {9949#true} #633#return; {9949#true} is VALID [2018-11-23 10:59:22,809 INFO L256 TraceCheckUtils]: 4: Hoare triple {9949#true} call #t~ret138 := main(); {9949#true} is VALID [2018-11-23 10:59:22,810 INFO L273 TraceCheckUtils]: 5: Hoare triple {9949#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,810 INFO L256 TraceCheckUtils]: 6: Hoare triple {9949#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {9949#true} is VALID [2018-11-23 10:59:22,810 INFO L273 TraceCheckUtils]: 7: Hoare triple {9949#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,810 INFO L273 TraceCheckUtils]: 8: Hoare triple {9949#true} assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {9949#true} is VALID [2018-11-23 10:59:22,810 INFO L273 TraceCheckUtils]: 9: Hoare triple {9949#true} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {9949#true} is VALID [2018-11-23 10:59:22,810 INFO L273 TraceCheckUtils]: 10: Hoare triple {9949#true} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 11: Hoare triple {9949#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 12: Hoare triple {9949#true} assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 13: Hoare triple {9949#true} assume !false; {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 14: Hoare triple {9949#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 15: Hoare triple {9949#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 16: Hoare triple {9949#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,811 INFO L273 TraceCheckUtils]: 17: Hoare triple {9949#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,812 INFO L273 TraceCheckUtils]: 18: Hoare triple {9949#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,812 INFO L273 TraceCheckUtils]: 19: Hoare triple {9949#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,812 INFO L273 TraceCheckUtils]: 20: Hoare triple {9949#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,812 INFO L273 TraceCheckUtils]: 21: Hoare triple {9949#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,812 INFO L273 TraceCheckUtils]: 22: Hoare triple {9949#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,812 INFO L273 TraceCheckUtils]: 23: Hoare triple {9949#true} assume 8464bv32 == #t~mem32;havoc #t~mem32; {9949#true} is VALID [2018-11-23 10:59:22,813 INFO L273 TraceCheckUtils]: 24: Hoare triple {9949#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {9949#true} is VALID [2018-11-23 10:59:22,813 INFO L273 TraceCheckUtils]: 25: Hoare triple {9949#true} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {9949#true} is VALID [2018-11-23 10:59:22,813 INFO L273 TraceCheckUtils]: 26: Hoare triple {9949#true} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,813 INFO L273 TraceCheckUtils]: 27: Hoare triple {9949#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,813 INFO L273 TraceCheckUtils]: 28: Hoare triple {9949#true} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {9949#true} is VALID [2018-11-23 10:59:22,814 INFO L273 TraceCheckUtils]: 29: Hoare triple {9949#true} ~skip~0 := 0bv32; {9949#true} is VALID [2018-11-23 10:59:22,814 INFO L273 TraceCheckUtils]: 30: Hoare triple {9949#true} assume !false; {9949#true} is VALID [2018-11-23 10:59:22,814 INFO L273 TraceCheckUtils]: 31: Hoare triple {9949#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,814 INFO L273 TraceCheckUtils]: 32: Hoare triple {9949#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,814 INFO L273 TraceCheckUtils]: 33: Hoare triple {9949#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 34: Hoare triple {9949#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 35: Hoare triple {9949#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 36: Hoare triple {9949#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 37: Hoare triple {9949#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 38: Hoare triple {9949#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 39: Hoare triple {9949#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,815 INFO L273 TraceCheckUtils]: 40: Hoare triple {9949#true} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,816 INFO L273 TraceCheckUtils]: 41: Hoare triple {9949#true} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,816 INFO L273 TraceCheckUtils]: 42: Hoare triple {9949#true} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,816 INFO L273 TraceCheckUtils]: 43: Hoare triple {9949#true} assume 8496bv32 == #t~mem35;havoc #t~mem35; {9949#true} is VALID [2018-11-23 10:59:22,816 INFO L273 TraceCheckUtils]: 44: Hoare triple {9949#true} ~ret~0 := #t~nondet70;havoc #t~nondet70; {9949#true} is VALID [2018-11-23 10:59:22,816 INFO L273 TraceCheckUtils]: 45: Hoare triple {9949#true} assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; {9949#true} is VALID [2018-11-23 10:59:22,816 INFO L273 TraceCheckUtils]: 46: Hoare triple {9949#true} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,817 INFO L273 TraceCheckUtils]: 47: Hoare triple {9949#true} assume 0bv32 != #t~mem71;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,817 INFO L273 TraceCheckUtils]: 48: Hoare triple {9949#true} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,817 INFO L273 TraceCheckUtils]: 49: Hoare triple {9949#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,817 INFO L273 TraceCheckUtils]: 50: Hoare triple {9949#true} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {9949#true} is VALID [2018-11-23 10:59:22,817 INFO L273 TraceCheckUtils]: 51: Hoare triple {9949#true} ~skip~0 := 0bv32; {9949#true} is VALID [2018-11-23 10:59:22,817 INFO L273 TraceCheckUtils]: 52: Hoare triple {9949#true} assume !false; {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 53: Hoare triple {9949#true} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 54: Hoare triple {9949#true} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 55: Hoare triple {9949#true} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 56: Hoare triple {9949#true} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 57: Hoare triple {9949#true} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 58: Hoare triple {9949#true} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,818 INFO L273 TraceCheckUtils]: 59: Hoare triple {9949#true} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 60: Hoare triple {9949#true} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 61: Hoare triple {9949#true} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 62: Hoare triple {9949#true} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 63: Hoare triple {9949#true} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 64: Hoare triple {9949#true} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 65: Hoare triple {9949#true} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,819 INFO L273 TraceCheckUtils]: 66: Hoare triple {9949#true} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,820 INFO L273 TraceCheckUtils]: 67: Hoare triple {9949#true} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,820 INFO L273 TraceCheckUtils]: 68: Hoare triple {9949#true} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,820 INFO L273 TraceCheckUtils]: 69: Hoare triple {9949#true} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,820 INFO L273 TraceCheckUtils]: 70: Hoare triple {9949#true} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,820 INFO L273 TraceCheckUtils]: 71: Hoare triple {9949#true} assume !(8544bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,821 INFO L273 TraceCheckUtils]: 72: Hoare triple {9949#true} assume !(8545bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,821 INFO L273 TraceCheckUtils]: 73: Hoare triple {9949#true} assume !(8560bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,821 INFO L273 TraceCheckUtils]: 74: Hoare triple {9949#true} assume !(8561bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,821 INFO L273 TraceCheckUtils]: 75: Hoare triple {9949#true} assume !(8448bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,822 INFO L273 TraceCheckUtils]: 76: Hoare triple {9949#true} assume !(8576bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,822 INFO L273 TraceCheckUtils]: 77: Hoare triple {9949#true} assume !(8577bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,822 INFO L273 TraceCheckUtils]: 78: Hoare triple {9949#true} assume !(8592bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,822 INFO L273 TraceCheckUtils]: 79: Hoare triple {9949#true} assume !(8593bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,823 INFO L273 TraceCheckUtils]: 80: Hoare triple {9949#true} assume !(8608bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,823 INFO L273 TraceCheckUtils]: 81: Hoare triple {9949#true} assume !(8609bv32 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,823 INFO L273 TraceCheckUtils]: 82: Hoare triple {9949#true} assume !(8640bv32 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,823 INFO L273 TraceCheckUtils]: 83: Hoare triple {9949#true} assume !(8641bv32 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {9949#true} is VALID [2018-11-23 10:59:22,824 INFO L273 TraceCheckUtils]: 84: Hoare triple {9949#true} assume 8656bv32 == #t~mem54;havoc #t~mem54; {9949#true} is VALID [2018-11-23 10:59:22,824 INFO L273 TraceCheckUtils]: 85: Hoare triple {9949#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, ~bvadd32(836bv32, #t~mem118.offset), 4bv32);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, ~bvadd32(172bv32, #t~mem117.offset), 4bv32);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem119.base, #t~mem119.offset; {9949#true} is VALID [2018-11-23 10:59:22,824 INFO L273 TraceCheckUtils]: 86: Hoare triple {9949#true} assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; {9949#true} is VALID [2018-11-23 10:59:22,833 INFO L273 TraceCheckUtils]: 87: Hoare triple {9949#true} assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 3bv32; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,838 INFO L273 TraceCheckUtils]: 88: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,838 INFO L273 TraceCheckUtils]: 89: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == ~tmp___10~0); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,840 INFO L273 TraceCheckUtils]: 90: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,840 INFO L273 TraceCheckUtils]: 91: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,842 INFO L273 TraceCheckUtils]: 92: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} ~skip~0 := 0bv32; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,842 INFO L273 TraceCheckUtils]: 93: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !false; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,844 INFO L273 TraceCheckUtils]: 94: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,844 INFO L273 TraceCheckUtils]: 95: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,846 INFO L273 TraceCheckUtils]: 96: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,846 INFO L273 TraceCheckUtils]: 97: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,848 INFO L273 TraceCheckUtils]: 98: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,850 INFO L273 TraceCheckUtils]: 99: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,850 INFO L273 TraceCheckUtils]: 100: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,859 INFO L273 TraceCheckUtils]: 101: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,859 INFO L273 TraceCheckUtils]: 102: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,860 INFO L273 TraceCheckUtils]: 103: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,863 INFO L273 TraceCheckUtils]: 104: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,863 INFO L273 TraceCheckUtils]: 105: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,865 INFO L273 TraceCheckUtils]: 106: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,865 INFO L273 TraceCheckUtils]: 107: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,867 INFO L273 TraceCheckUtils]: 108: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,867 INFO L273 TraceCheckUtils]: 109: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,867 INFO L273 TraceCheckUtils]: 110: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,868 INFO L273 TraceCheckUtils]: 111: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,868 INFO L273 TraceCheckUtils]: 112: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume 8544bv32 == #t~mem41;havoc #t~mem41; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,868 INFO L273 TraceCheckUtils]: 113: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,869 INFO L273 TraceCheckUtils]: 114: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,869 INFO L273 TraceCheckUtils]: 115: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,869 INFO L273 TraceCheckUtils]: 116: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,870 INFO L273 TraceCheckUtils]: 117: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,870 INFO L273 TraceCheckUtils]: 118: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 10:59:22,870 INFO L273 TraceCheckUtils]: 119: Hoare triple {10215#(= (_ bv3 32) ssl3_accept_~blastFlag~0)} assume 7bv32 == ~blastFlag~0; {9950#false} is VALID [2018-11-23 10:59:22,870 INFO L273 TraceCheckUtils]: 120: Hoare triple {9950#false} assume !false; {9950#false} is VALID [2018-11-23 10:59:22,877 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 10:59:22,878 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:59:22,880 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:59:22,880 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 10:59:22,880 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 121 [2018-11-23 10:59:22,881 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:59:22,881 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 10:59:23,017 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 95 edges. 95 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:23,017 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 10:59:23,018 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 10:59:23,018 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:23,018 INFO L87 Difference]: Start difference. First operand 633 states and 944 transitions. Second operand 3 states. [2018-11-23 10:59:32,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:32,302 INFO L93 Difference]: Finished difference Result 1250 states and 1878 transitions. [2018-11-23 10:59:32,302 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 10:59:32,303 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 121 [2018-11-23 10:59:32,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 10:59:32,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:32,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 600 transitions. [2018-11-23 10:59:32,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 10:59:32,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 600 transitions. [2018-11-23 10:59:32,312 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 600 transitions. [2018-11-23 10:59:33,327 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 600 edges. 600 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:33,357 INFO L225 Difference]: With dead ends: 1250 [2018-11-23 10:59:33,357 INFO L226 Difference]: Without dead ends: 755 [2018-11-23 10:59:33,358 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 10:59:33,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 755 states. [2018-11-23 10:59:33,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 755 to 755. [2018-11-23 10:59:33,509 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 10:59:33,510 INFO L82 GeneralOperation]: Start isEquivalent. First operand 755 states. Second operand 755 states. [2018-11-23 10:59:33,510 INFO L74 IsIncluded]: Start isIncluded. First operand 755 states. Second operand 755 states. [2018-11-23 10:59:33,510 INFO L87 Difference]: Start difference. First operand 755 states. Second operand 755 states. [2018-11-23 10:59:33,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:33,542 INFO L93 Difference]: Finished difference Result 755 states and 1125 transitions. [2018-11-23 10:59:33,542 INFO L276 IsEmpty]: Start isEmpty. Operand 755 states and 1125 transitions. [2018-11-23 10:59:33,544 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:33,544 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:33,544 INFO L74 IsIncluded]: Start isIncluded. First operand 755 states. Second operand 755 states. [2018-11-23 10:59:33,544 INFO L87 Difference]: Start difference. First operand 755 states. Second operand 755 states. [2018-11-23 10:59:33,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 10:59:33,579 INFO L93 Difference]: Finished difference Result 755 states and 1125 transitions. [2018-11-23 10:59:33,579 INFO L276 IsEmpty]: Start isEmpty. Operand 755 states and 1125 transitions. [2018-11-23 10:59:33,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 10:59:33,581 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 10:59:33,582 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 10:59:33,582 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 10:59:33,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 755 states. [2018-11-23 10:59:33,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 755 states to 755 states and 1125 transitions. [2018-11-23 10:59:33,622 INFO L78 Accepts]: Start accepts. Automaton has 755 states and 1125 transitions. Word has length 121 [2018-11-23 10:59:33,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 10:59:33,622 INFO L480 AbstractCegarLoop]: Abstraction has 755 states and 1125 transitions. [2018-11-23 10:59:33,622 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 10:59:33,622 INFO L276 IsEmpty]: Start isEmpty. Operand 755 states and 1125 transitions. [2018-11-23 10:59:33,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 10:59:33,625 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 10:59:33,625 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 10:59:33,625 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 10:59:33,626 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 10:59:33,626 INFO L82 PathProgramCache]: Analyzing trace with hash -307755489, now seen corresponding path program 1 times [2018-11-23 10:59:33,627 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 10:59:33,627 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 10:59:33,664 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 10:59:34,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:35,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 10:59:35,042 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 10:59:35,263 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 1 [2018-11-23 10:59:35,286 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:35,469 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 20 [2018-11-23 10:59:35,521 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 23 [2018-11-23 10:59:35,600 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:35,626 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 33 [2018-11-23 10:59:35,723 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:35,747 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:35,768 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:35,835 INFO L303 Elim1Store]: Index analysis took 149 ms [2018-11-23 10:59:35,836 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 52 [2018-11-23 10:59:35,840 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:35,859 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:35,874 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:35,887 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:35,927 INFO L267 ElimStorePlain]: Start of recursive call 1: 3 dim-0 vars, 1 dim-1 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:35,927 INFO L202 ElimStorePlain]: Needed 6 recursive calls to eliminate 5 variables, input treesize:35, output treesize:14 [2018-11-23 10:59:35,950 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-23 10:59:35,950 WARN L384 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_167|, |main_#t~malloc4.base|, |main_#t~malloc5.base|, |main_#t~malloc6.base|, |v_#valid_13|]. (and (= main_~s~0.offset (_ bv0 32)) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_167| main_~s~0.base (store (store (store (select |v_#memory_$Pointer$.base_167| main_~s~0.base) (bvadd main_~s~0.offset (_ bv84 32)) |main_#t~malloc4.base|) (bvadd main_~s~0.offset (_ bv204 32)) |main_#t~malloc5.base|) (bvadd main_~s~0.offset (_ bv176 32)) |main_#t~malloc6.base|))) (= (_ bv0 1) (select (store |v_#valid_13| main_~s~0.base (_ bv1 1)) |main_#t~malloc4.base|))) [2018-11-23 10:59:35,950 WARN L385 uantifierElimination]: ElimStorePlain result: ∃ []. (and (not (= (select (select |#memory_$Pointer$.base| main_~s~0.base) (bvadd main_~s~0.offset (_ bv84 32))) main_~s~0.base)) (= main_~s~0.offset (_ bv0 32))) [2018-11-23 10:59:36,019 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:36,039 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:36,132 INFO L267 ElimStorePlain]: Start of recursive call 5: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:36,150 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:36,218 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 33 [2018-11-23 10:59:36,224 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,229 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 41 [2018-11-23 10:59:36,258 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,263 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,268 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,295 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 4 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 57 [2018-11-23 10:59:36,309 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,312 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,314 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,351 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 4 disjoint index pairs (out of 3 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 38 [2018-11-23 10:59:36,354 INFO L267 ElimStorePlain]: Start of recursive call 9: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,369 INFO L267 ElimStorePlain]: Start of recursive call 8: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,379 INFO L267 ElimStorePlain]: Start of recursive call 7: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,390 INFO L267 ElimStorePlain]: Start of recursive call 6: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,404 INFO L267 ElimStorePlain]: Start of recursive call 1: 3 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,404 INFO L202 ElimStorePlain]: Needed 9 recursive calls to eliminate 3 variables, input treesize:69, output treesize:12 [2018-11-23 10:59:36,694 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-23 10:59:36,695 WARN L384 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_163|, |v_#memory_$Pointer$.base_162|, |v_#memory_$Pointer$.base_168|]. (let ((.cse1 (bvadd ssl3_accept_~s.offset (_ bv52 32))) (.cse3 (select |v_#memory_$Pointer$.base_162| ssl3_accept_~s.base)) (.cse0 (select |v_#memory_$Pointer$.base_163| ssl3_accept_~s.base)) (.cse2 (select |v_#memory_$Pointer$.base_168| ssl3_accept_~s.base))) (and (= ssl3_accept_~s.offset (_ bv0 32)) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_163| ssl3_accept_~s.base (store .cse0 .cse1 (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) .cse1)))) (= |v_#memory_$Pointer$.base_162| (store |v_#memory_$Pointer$.base_168| ssl3_accept_~s.base (store .cse2 .cse1 (select .cse3 .cse1)))) (= |v_#memory_$Pointer$.base_163| (store |v_#memory_$Pointer$.base_162| ssl3_accept_~s.base (let ((.cse4 (bvadd ssl3_accept_~s.offset (_ bv92 32)))) (store .cse3 .cse4 (select .cse0 .cse4))))) (not (= ssl3_accept_~s.base (select .cse2 (_ bv84 32)))))) [2018-11-23 10:59:36,695 WARN L385 uantifierElimination]: ElimStorePlain result: ∃ []. (and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32))))) [2018-11-23 10:59:36,731 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:36,742 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,745 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:36,748 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,754 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,761 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,761 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:31, output treesize:12 [2018-11-23 10:59:36,802 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:36,863 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,866 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:36,868 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,874 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,881 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,882 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:31, output treesize:12 [2018-11-23 10:59:36,923 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:36,933 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,942 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:36,943 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,954 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:36,982 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:36,990 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:36,993 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:37,002 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,007 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,015 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,015 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 2 variables, input treesize:50, output treesize:12 [2018-11-23 10:59:37,119 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-23 10:59:37,119 WARN L384 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_164|, |v_#memory_$Pointer$.base_171|]. (let ((.cse0 (select |v_#memory_$Pointer$.base_171| ssl3_accept_~s.base)) (.cse2 (select |v_#memory_$Pointer$.base_164| ssl3_accept_~s.base))) (and (= |v_#memory_$Pointer$.base_164| (store |v_#memory_$Pointer$.base_171| ssl3_accept_~s.base (let ((.cse1 (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (store .cse0 .cse1 (select .cse2 .cse1))))) (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select .cse0 (_ bv84 32)))) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_164| ssl3_accept_~s.base (let ((.cse3 (bvadd ssl3_accept_~s.offset (_ bv64 32)))) (store .cse2 .cse3 (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) .cse3))))))) [2018-11-23 10:59:37,119 WARN L385 uantifierElimination]: ElimStorePlain result: ∃ []. (and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32))))) [2018-11-23 10:59:37,192 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:37,199 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:37,202 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:37,206 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,212 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,219 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,219 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:31, output treesize:12 [2018-11-23 10:59:37,239 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:37,248 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:37,251 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:37,255 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,260 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,266 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,266 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:31, output treesize:12 [2018-11-23 10:59:37,362 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:37,378 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:37,393 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:37,399 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,416 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,469 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 23 [2018-11-23 10:59:37,476 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:37,480 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2018-11-23 10:59:37,481 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,490 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,514 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 16 [2018-11-23 10:59:37,519 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2018-11-23 10:59:37,520 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,522 INFO L267 ElimStorePlain]: Start of recursive call 6: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,529 INFO L267 ElimStorePlain]: Start of recursive call 1: 3 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:37,529 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 3 variables, input treesize:69, output treesize:12 [2018-11-23 10:59:38,913 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-23 10:59:38,914 WARN L384 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_165|, |v_#memory_$Pointer$.base_174|, |v_#memory_$Pointer$.offset_162|]. (let ((.cse2 (select |v_#memory_$Pointer$.base_165| ssl3_accept_~s.base)) (.cse0 (select |v_#memory_$Pointer$.base_174| ssl3_accept_~s.base)) (.cse3 (bvadd ssl3_accept_~s.offset (_ bv64 32)))) (and (= |v_#memory_$Pointer$.base_165| (store |v_#memory_$Pointer$.base_174| ssl3_accept_~s.base (let ((.cse1 (bvadd ssl3_accept_~s.offset (_ bv52 32)))) (store .cse0 .cse1 (select .cse2 .cse1))))) (= ssl3_accept_~s.offset (_ bv0 32)) (= (store |v_#memory_$Pointer$.base_165| ssl3_accept_~s.base (store .cse2 .cse3 (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) .cse3))) |#memory_$Pointer$.base|) (not (= ssl3_accept_~s.base (select .cse0 (_ bv84 32)))) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_162| ssl3_accept_~s.base (store (select |v_#memory_$Pointer$.offset_162| ssl3_accept_~s.base) .cse3 (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) .cse3)))))) [2018-11-23 10:59:38,914 WARN L385 uantifierElimination]: ElimStorePlain result: ∃ []. (and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32))))) [2018-11-23 10:59:39,001 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 22 [2018-11-23 10:59:39,010 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2018-11-23 10:59:39,011 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,021 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,084 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:39,111 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 128 treesize of output 132 [2018-11-23 10:59:39,120 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 1 [2018-11-23 10:59:39,120 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,144 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,180 INFO L701 Elim1Store]: detected not equals via solver [2018-11-23 10:59:39,195 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 71 treesize of output 72 [2018-11-23 10:59:39,202 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 1 [2018-11-23 10:59:39,203 INFO L267 ElimStorePlain]: Start of recursive call 7: End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,212 INFO L267 ElimStorePlain]: Start of recursive call 6: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,232 INFO L267 ElimStorePlain]: Start of recursive call 1: 3 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-23 10:59:39,232 INFO L202 ElimStorePlain]: Needed 7 recursive calls to eliminate 3 variables, input treesize:141, output treesize:33 [2018-11-23 10:59:39,308 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-23 10:59:39,309 WARN L384 uantifierElimination]: Input elimination task: ∃ [|v_#memory_$Pointer$.base_175|, |v_#memory_int_181|, |v_#memory_$Pointer$.offset_163|]. (let ((.cse2 (select |v_#memory_$Pointer$.base_175| ssl3_accept_~s.base)) (.cse3 (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (let ((.cse0 (select .cse2 .cse3)) (.cse1 (bvadd (select (select |v_#memory_$Pointer$.offset_163| ssl3_accept_~s.base) .cse3) (_ bv871 32)))) (and (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_175| .cse0 (store (select |v_#memory_$Pointer$.base_175| .cse0) .cse1 (select (select |#memory_$Pointer$.base| .cse0) .cse1)))) (= ssl3_accept_~s.offset (_ bv0 32)) (= (store |v_#memory_$Pointer$.offset_163| .cse0 (store (select |v_#memory_$Pointer$.offset_163| .cse0) .cse1 (select (select |#memory_$Pointer$.offset| .cse0) .cse1))) |#memory_$Pointer$.offset|) (not (= ssl3_accept_~s.base (select .cse2 (_ bv84 32)))) (= (store |v_#memory_int_181| .cse0 (store (select |v_#memory_int_181| .cse0) .cse1 (_ bv0 32))) |#memory_int|)))) [2018-11-23 10:59:39,309 WARN L385 uantifierElimination]: ElimStorePlain result: ∃ []. (let ((.cse0 (select |#memory_$Pointer$.base| ssl3_accept_~s.base))) (and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv0 32) (let ((.cse1 (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (select (select |#memory_int| (select .cse0 .cse1)) (bvadd (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) .cse1) (_ bv871 32))))) (not (= ssl3_accept_~s.base (select .cse0 (_ bv84 32)))))) [2018-11-23 10:59:39,389 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 39 [2018-11-23 10:59:39,410 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 31 [2018-11-23 10:59:39,420 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:39,434 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:39,547 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-23 10:59:39,547 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:54, output treesize:42 [2018-11-23 10:59:39,556 WARN L383 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2018-11-23 10:59:39,557 WARN L384 uantifierElimination]: Input elimination task: ∃ [|#memory_$Pointer$.offset|]. (let ((.cse1 (select |#memory_$Pointer$.base| ssl3_accept_~s.base))) (let ((.cse0 (let ((.cse2 (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (select (select |#memory_int| (select .cse1 .cse2)) (bvadd (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) .cse2) (_ bv871 32)))))) (and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv0 32) .cse0) (not (= ssl3_accept_~s.base (select .cse1 (_ bv84 32)))) (= |ssl3_accept_#t~mem83| .cse0)))) [2018-11-23 10:59:39,557 WARN L385 uantifierElimination]: ElimStorePlain result: ∃ [v_arrayElimCell_16]. (let ((.cse1 (select |#memory_$Pointer$.base| ssl3_accept_~s.base))) (let ((.cse0 (select (select |#memory_int| (select .cse1 (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd v_arrayElimCell_16 (_ bv871 32))))) (and (= .cse0 (_ bv0 32)) (= |ssl3_accept_#t~mem83| .cse0) (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select .cse1 (_ bv84 32))))))) [2018-11-23 10:59:39,668 INFO L256 TraceCheckUtils]: 0: Hoare triple {14196#true} call ULTIMATE.init(); {14196#true} is VALID [2018-11-23 10:59:39,668 INFO L273 TraceCheckUtils]: 1: Hoare triple {14196#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); {14196#true} is VALID [2018-11-23 10:59:39,668 INFO L273 TraceCheckUtils]: 2: Hoare triple {14196#true} assume true; {14196#true} is VALID [2018-11-23 10:59:39,668 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14196#true} {14196#true} #633#return; {14196#true} is VALID [2018-11-23 10:59:39,668 INFO L256 TraceCheckUtils]: 4: Hoare triple {14196#true} call #t~ret138 := main(); {14196#true} is VALID [2018-11-23 10:59:39,673 INFO L273 TraceCheckUtils]: 5: Hoare triple {14196#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); {14216#(and (not (= (select (select |#memory_$Pointer$.base| main_~s~0.base) (bvadd main_~s~0.offset (_ bv84 32))) main_~s~0.base)) (= main_~s~0.offset (_ bv0 32)))} is VALID [2018-11-23 10:59:39,674 INFO L256 TraceCheckUtils]: 6: Hoare triple {14216#(and (not (= (select (select |#memory_$Pointer$.base| main_~s~0.base) (bvadd main_~s~0.offset (_ bv84 32))) main_~s~0.base)) (= main_~s~0.offset (_ bv0 32)))} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14220#(and (= (_ bv0 32) |ssl3_accept_#in~s.offset|) (not (= |ssl3_accept_#in~s.base| (select (select |#memory_$Pointer$.base| |ssl3_accept_#in~s.base|) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,684 INFO L273 TraceCheckUtils]: 7: Hoare triple {14220#(and (= (_ bv0 32) |ssl3_accept_#in~s.offset|) (not (= |ssl3_accept_#in~s.base| (select (select |#memory_$Pointer$.base| |ssl3_accept_#in~s.base|) (_ bv84 32)))))} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,685 INFO L273 TraceCheckUtils]: 8: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,687 INFO L273 TraceCheckUtils]: 9: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,687 INFO L273 TraceCheckUtils]: 10: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,688 INFO L273 TraceCheckUtils]: 11: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,688 INFO L273 TraceCheckUtils]: 12: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,689 INFO L273 TraceCheckUtils]: 13: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !false; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,689 INFO L273 TraceCheckUtils]: 14: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,690 INFO L273 TraceCheckUtils]: 15: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,690 INFO L273 TraceCheckUtils]: 16: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,691 INFO L273 TraceCheckUtils]: 17: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,691 INFO L273 TraceCheckUtils]: 18: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,692 INFO L273 TraceCheckUtils]: 19: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,692 INFO L273 TraceCheckUtils]: 20: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,693 INFO L273 TraceCheckUtils]: 21: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,694 INFO L273 TraceCheckUtils]: 22: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,695 INFO L273 TraceCheckUtils]: 23: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 8464bv32 == #t~mem32;havoc #t~mem32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,697 INFO L273 TraceCheckUtils]: 24: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,697 INFO L273 TraceCheckUtils]: 25: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,703 INFO L273 TraceCheckUtils]: 26: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,704 INFO L273 TraceCheckUtils]: 27: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,704 INFO L273 TraceCheckUtils]: 28: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,705 INFO L273 TraceCheckUtils]: 29: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} ~skip~0 := 0bv32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,705 INFO L273 TraceCheckUtils]: 30: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !false; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,714 INFO L273 TraceCheckUtils]: 31: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,714 INFO L273 TraceCheckUtils]: 32: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,715 INFO L273 TraceCheckUtils]: 33: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,716 INFO L273 TraceCheckUtils]: 34: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,716 INFO L273 TraceCheckUtils]: 35: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,717 INFO L273 TraceCheckUtils]: 36: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,717 INFO L273 TraceCheckUtils]: 37: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,718 INFO L273 TraceCheckUtils]: 38: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,718 INFO L273 TraceCheckUtils]: 39: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,736 INFO L273 TraceCheckUtils]: 40: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,745 INFO L273 TraceCheckUtils]: 41: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,758 INFO L273 TraceCheckUtils]: 42: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,766 INFO L273 TraceCheckUtils]: 43: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 8496bv32 == #t~mem35;havoc #t~mem35; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,768 INFO L273 TraceCheckUtils]: 44: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} ~ret~0 := #t~nondet70;havoc #t~nondet70; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,768 INFO L273 TraceCheckUtils]: 45: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,769 INFO L273 TraceCheckUtils]: 46: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,771 INFO L273 TraceCheckUtils]: 47: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 0bv32 != #t~mem71;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,772 INFO L273 TraceCheckUtils]: 48: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,773 INFO L273 TraceCheckUtils]: 49: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,773 INFO L273 TraceCheckUtils]: 50: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,774 INFO L273 TraceCheckUtils]: 51: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} ~skip~0 := 0bv32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,775 INFO L273 TraceCheckUtils]: 52: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !false; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,775 INFO L273 TraceCheckUtils]: 53: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,776 INFO L273 TraceCheckUtils]: 54: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,777 INFO L273 TraceCheckUtils]: 55: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,778 INFO L273 TraceCheckUtils]: 56: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,779 INFO L273 TraceCheckUtils]: 57: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,779 INFO L273 TraceCheckUtils]: 58: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,780 INFO L273 TraceCheckUtils]: 59: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,781 INFO L273 TraceCheckUtils]: 60: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,782 INFO L273 TraceCheckUtils]: 61: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,782 INFO L273 TraceCheckUtils]: 62: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,783 INFO L273 TraceCheckUtils]: 63: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,784 INFO L273 TraceCheckUtils]: 64: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,785 INFO L273 TraceCheckUtils]: 65: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,786 INFO L273 TraceCheckUtils]: 66: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,786 INFO L273 TraceCheckUtils]: 67: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 8512bv32 == #t~mem37;havoc #t~mem37; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,787 INFO L273 TraceCheckUtils]: 68: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, ~bvadd32(836bv32, #t~mem72.offset), 4bv32);call #t~mem74 := read~intINTTYPE4(#t~mem73.base, ~bvadd32(12bv32, #t~mem73.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,788 INFO L273 TraceCheckUtils]: 69: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 != ~bvand32(256bv32, #t~mem74));havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;~ret~0 := #t~nondet75;havoc #t~nondet75; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,789 INFO L273 TraceCheckUtils]: 70: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 6bv32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,790 INFO L273 TraceCheckUtils]: 71: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !~bvsle32(~ret~0, 0bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,795 INFO L273 TraceCheckUtils]: 72: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call write~intINTTYPE4(8528bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,796 INFO L273 TraceCheckUtils]: 73: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,797 INFO L273 TraceCheckUtils]: 74: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,797 INFO L273 TraceCheckUtils]: 75: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} ~skip~0 := 0bv32; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,798 INFO L273 TraceCheckUtils]: 76: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !false; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,799 INFO L273 TraceCheckUtils]: 77: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,800 INFO L273 TraceCheckUtils]: 78: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,800 INFO L273 TraceCheckUtils]: 79: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,801 INFO L273 TraceCheckUtils]: 80: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,802 INFO L273 TraceCheckUtils]: 81: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,803 INFO L273 TraceCheckUtils]: 82: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,803 INFO L273 TraceCheckUtils]: 83: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,804 INFO L273 TraceCheckUtils]: 84: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,805 INFO L273 TraceCheckUtils]: 85: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,806 INFO L273 TraceCheckUtils]: 86: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,807 INFO L273 TraceCheckUtils]: 87: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,807 INFO L273 TraceCheckUtils]: 88: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,808 INFO L273 TraceCheckUtils]: 89: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,809 INFO L273 TraceCheckUtils]: 90: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,810 INFO L273 TraceCheckUtils]: 91: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,810 INFO L273 TraceCheckUtils]: 92: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,811 INFO L273 TraceCheckUtils]: 93: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 8528bv32 == #t~mem39;havoc #t~mem39; {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,812 INFO L273 TraceCheckUtils]: 94: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, ~bvadd32(836bv32, #t~mem76.offset), 4bv32);call #t~mem78 := read~intINTTYPE4(#t~mem77.base, ~bvadd32(12bv32, #t~mem77.offset), 4bv32);~l~0 := #t~mem78;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem77.base, #t~mem77.offset;havoc #t~mem78;call #t~mem79 := read~intINTTYPE4(~s.base, ~bvadd32(232bv32, ~s.offset), 4bv32); {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,829 INFO L273 TraceCheckUtils]: 95: Hoare triple {14224#(and (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume !(0bv32 != ~bvand32(2097152bv32, #t~mem79));havoc #t~mem79;call #t~mem81.base, #t~mem81.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, #t~mem81.base, ~bvadd32(871bv32, #t~mem81.offset), 4bv32);havoc #t~mem81.base, #t~mem81.offset; {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32))) (_ bv871 32)))) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,830 INFO L273 TraceCheckUtils]: 96: Hoare triple {14489#(and (= ssl3_accept_~s.offset (_ bv0 32)) (= (_ bv0 32) (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32))) (_ bv871 32)))) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem83 := read~intINTTYPE4(#t~mem82.base, ~bvadd32(871bv32, #t~mem82.offset), 4bv32); {14493#(and (exists ((v_arrayElimCell_16 (_ BitVec 32))) (and (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd v_arrayElimCell_16 (_ bv871 32))) (_ bv0 32)) (= |ssl3_accept_#t~mem83| (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd v_arrayElimCell_16 (_ bv871 32)))))) (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} is VALID [2018-11-23 10:59:39,832 INFO L273 TraceCheckUtils]: 97: Hoare triple {14493#(and (exists ((v_arrayElimCell_16 (_ BitVec 32))) (and (= (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd v_arrayElimCell_16 (_ bv871 32))) (_ bv0 32)) (= |ssl3_accept_#t~mem83| (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (bvadd ssl3_accept_~s.offset (_ bv84 32)))) (bvadd v_arrayElimCell_16 (_ bv871 32)))))) (= ssl3_accept_~s.offset (_ bv0 32)) (not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (_ bv84 32)))))} assume 0bv32 != #t~mem83;havoc #t~mem83;havoc #t~mem82.base, #t~mem82.offset; {14197#false} is VALID [2018-11-23 10:59:39,832 INFO L273 TraceCheckUtils]: 98: Hoare triple {14197#false} ~ret~0 := #t~nondet92;havoc #t~nondet92; {14197#false} is VALID [2018-11-23 10:59:39,832 INFO L273 TraceCheckUtils]: 99: Hoare triple {14197#false} assume 6bv32 == ~blastFlag~0;~blastFlag~0 := 7bv32; {14197#false} is VALID [2018-11-23 10:59:39,832 INFO L273 TraceCheckUtils]: 100: Hoare triple {14197#false} assume !~bvsle32(~ret~0, 0bv32); {14197#false} is VALID [2018-11-23 10:59:39,832 INFO L273 TraceCheckUtils]: 101: Hoare triple {14197#false} call write~intINTTYPE4(8544bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,833 INFO L273 TraceCheckUtils]: 102: Hoare triple {14197#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,833 INFO L273 TraceCheckUtils]: 103: Hoare triple {14197#false} assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14197#false} is VALID [2018-11-23 10:59:39,833 INFO L273 TraceCheckUtils]: 104: Hoare triple {14197#false} ~skip~0 := 0bv32; {14197#false} is VALID [2018-11-23 10:59:39,834 INFO L273 TraceCheckUtils]: 105: Hoare triple {14197#false} assume !false; {14197#false} is VALID [2018-11-23 10:59:39,834 INFO L273 TraceCheckUtils]: 106: Hoare triple {14197#false} call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,834 INFO L273 TraceCheckUtils]: 107: Hoare triple {14197#false} assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,835 INFO L273 TraceCheckUtils]: 108: Hoare triple {14197#false} assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,835 INFO L273 TraceCheckUtils]: 109: Hoare triple {14197#false} assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,835 INFO L273 TraceCheckUtils]: 110: Hoare triple {14197#false} assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,835 INFO L273 TraceCheckUtils]: 111: Hoare triple {14197#false} assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,835 INFO L273 TraceCheckUtils]: 112: Hoare triple {14197#false} assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,836 INFO L273 TraceCheckUtils]: 113: Hoare triple {14197#false} assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,836 INFO L273 TraceCheckUtils]: 114: Hoare triple {14197#false} assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,836 INFO L273 TraceCheckUtils]: 115: Hoare triple {14197#false} assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,836 INFO L273 TraceCheckUtils]: 116: Hoare triple {14197#false} assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,836 INFO L273 TraceCheckUtils]: 117: Hoare triple {14197#false} assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,837 INFO L273 TraceCheckUtils]: 118: Hoare triple {14197#false} assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,837 INFO L273 TraceCheckUtils]: 119: Hoare triple {14197#false} assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,837 INFO L273 TraceCheckUtils]: 120: Hoare triple {14197#false} assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,837 INFO L273 TraceCheckUtils]: 121: Hoare triple {14197#false} assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,837 INFO L273 TraceCheckUtils]: 122: Hoare triple {14197#false} assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,838 INFO L273 TraceCheckUtils]: 123: Hoare triple {14197#false} assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,838 INFO L273 TraceCheckUtils]: 124: Hoare triple {14197#false} assume 8544bv32 == #t~mem41;havoc #t~mem41; {14197#false} is VALID [2018-11-23 10:59:39,838 INFO L273 TraceCheckUtils]: 125: Hoare triple {14197#false} call #t~mem93 := read~intINTTYPE4(~s.base, ~bvadd32(180bv32, ~s.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,838 INFO L273 TraceCheckUtils]: 126: Hoare triple {14197#false} assume 0bv32 != ~bvand32(1bv32, #t~mem93);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, ~bvadd32(148bv32, #t~mem94.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,838 INFO L273 TraceCheckUtils]: 127: Hoare triple {14197#false} assume !(0bv32 != ~bvadd32(#t~mem95.base, #t~mem95.offset));havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {14197#false} is VALID [2018-11-23 10:59:39,839 INFO L273 TraceCheckUtils]: 128: Hoare triple {14197#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, ~bvadd32(836bv32, #t~mem98.offset), 4bv32);call #t~mem100 := read~intINTTYPE4(#t~mem99.base, ~bvadd32(12bv32, #t~mem99.offset), 4bv32); {14197#false} is VALID [2018-11-23 10:59:39,839 INFO L273 TraceCheckUtils]: 129: Hoare triple {14197#false} assume !(0bv32 != ~bvand32(256bv32, #t~mem100));havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem100; {14197#false} is VALID [2018-11-23 10:59:39,839 INFO L273 TraceCheckUtils]: 130: Hoare triple {14197#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call write~intINTTYPE4(1bv32, #t~mem103.base, ~bvadd32(895bv32, #t~mem103.offset), 4bv32);havoc #t~mem103.base, #t~mem103.offset;~ret~0 := #t~nondet104;havoc #t~nondet104; {14197#false} is VALID [2018-11-23 10:59:39,839 INFO L273 TraceCheckUtils]: 131: Hoare triple {14197#false} assume 7bv32 == ~blastFlag~0; {14197#false} is VALID [2018-11-23 10:59:39,839 INFO L273 TraceCheckUtils]: 132: Hoare triple {14197#false} assume !false; {14197#false} is VALID [2018-11-23 10:59:39,885 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2018-11-23 10:59:39,885 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 10:59:39,889 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 10:59:39,889 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 10:59:39,889 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 133 [2018-11-23 10:59:39,890 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 10:59:39,890 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-23 10:59:40,070 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 10:59:40,070 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 10:59:40,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 10:59:40,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 10:59:40,071 INFO L87 Difference]: Start difference. First operand 755 states and 1125 transitions. Second operand 7 states. [2018-11-23 11:01:45,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 11:01:45,411 INFO L93 Difference]: Finished difference Result 3052 states and 4598 transitions. [2018-11-23 11:01:45,411 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 11:01:45,411 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 133 [2018-11-23 11:01:45,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 11:01:45,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-23 11:01:45,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 936 transitions. [2018-11-23 11:01:45,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-23 11:01:45,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 936 transitions. [2018-11-23 11:01:45,422 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 936 transitions.