java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 12:53:38,824 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:53:38,826 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:53:38,838 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:53:38,839 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:53:38,840 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:53:38,841 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:53:38,843 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:53:38,845 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:53:38,846 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:53:38,847 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:53:38,847 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:53:38,848 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:53:38,849 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:53:38,851 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:53:38,852 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:53:38,853 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:53:38,855 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:53:38,857 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:53:38,859 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:53:38,861 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:53:38,862 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:53:38,865 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:53:38,865 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:53:38,866 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:53:38,867 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:53:38,868 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:53:38,869 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:53:38,870 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:53:38,871 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:53:38,871 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:53:38,872 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:53:38,872 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:53:38,873 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:53:38,874 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:53:38,875 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:53:38,875 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 12:53:38,891 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:53:38,891 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:53:38,892 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:53:38,892 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:53:38,893 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 12:53:38,894 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 12:53:38,894 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 12:53:38,894 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:53:38,894 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:53:38,895 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:53:38,895 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:53:38,895 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:53:38,895 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:53:38,896 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:53:38,896 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:53:38,896 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:53:38,897 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:53:38,897 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:53:38,897 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:53:38,897 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:53:38,898 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:53:38,898 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:53:38,898 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:53:38,898 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:53:38,899 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:53:38,899 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:53:38,899 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:53:38,899 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 12:53:38,900 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:53:38,900 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:53:38,900 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:53:38,947 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:53:38,966 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:53:38,970 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:53:38,972 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:53:38,973 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:53:38,973 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 12:53:39,047 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0c23dee04/6c1a1a07abbc4ed288517b36cc45c9b2/FLAG5e152574e [2018-11-23 12:53:39,551 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:53:39,552 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 12:53:39,569 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0c23dee04/6c1a1a07abbc4ed288517b36cc45c9b2/FLAG5e152574e [2018-11-23 12:53:39,847 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0c23dee04/6c1a1a07abbc4ed288517b36cc45c9b2 [2018-11-23 12:53:39,857 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:53:39,858 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:53:39,859 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:53:39,859 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:53:39,863 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:53:39,867 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:53:39" (1/1) ... [2018-11-23 12:53:39,870 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@47cfab51 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:39, skipping insertion in model container [2018-11-23 12:53:39,871 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:53:39" (1/1) ... [2018-11-23 12:53:39,882 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:53:39,937 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:53:40,362 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:53:40,368 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:53:40,423 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:53:40,513 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:53:40,514 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40 WrapperNode [2018-11-23 12:53:40,514 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:53:40,515 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:53:40,515 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:53:40,515 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:53:40,525 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,542 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,627 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:53:40,627 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:53:40,628 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:53:40,628 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:53:40,636 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,636 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,638 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,639 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,649 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,651 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,653 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... [2018-11-23 12:53:40,656 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:53:40,657 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:53:40,657 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:53:40,657 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:53:40,658 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:53:40,709 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 12:53:40,710 INFO L130 BoogieDeclarations]: Found specification of procedure my_malloc [2018-11-23 12:53:40,710 INFO L138 BoogieDeclarations]: Found implementation of procedure my_malloc [2018-11-23 12:53:40,710 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:53:40,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:53:40,710 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:53:40,711 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:53:40,711 INFO L130 BoogieDeclarations]: Found specification of procedure list_add [2018-11-23 12:53:40,711 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add [2018-11-23 12:53:40,711 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 12:53:40,711 INFO L130 BoogieDeclarations]: Found specification of procedure __blast_assert [2018-11-23 12:53:40,711 INFO L138 BoogieDeclarations]: Found implementation of procedure __blast_assert [2018-11-23 12:53:40,712 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2018-11-23 12:53:40,712 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2018-11-23 12:53:40,712 INFO L130 BoogieDeclarations]: Found specification of procedure __getMemory [2018-11-23 12:53:40,712 INFO L138 BoogieDeclarations]: Found implementation of procedure __getMemory [2018-11-23 12:53:40,713 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:53:40,713 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:53:41,581 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:53:41,581 INFO L280 CfgBuilder]: Removed 0 assue(true) statements. [2018-11-23 12:53:41,582 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:53:41 BoogieIcfgContainer [2018-11-23 12:53:41,582 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:53:41,583 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:53:41,583 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:53:41,586 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:53:41,587 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:53:39" (1/3) ... [2018-11-23 12:53:41,588 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@705bbf80 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:53:41, skipping insertion in model container [2018-11-23 12:53:41,588 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:53:40" (2/3) ... [2018-11-23 12:53:41,588 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@705bbf80 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:53:41, skipping insertion in model container [2018-11-23 12:53:41,588 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:53:41" (3/3) ... [2018-11-23 12:53:41,590 INFO L112 eAbstractionObserver]: Analyzing ICFG rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 12:53:41,600 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:53:41,608 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:53:41,627 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:53:41,666 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 12:53:41,667 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:53:41,668 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:53:41,668 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:53:41,669 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:53:41,670 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:53:41,670 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:53:41,670 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:53:41,670 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:53:41,689 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states. [2018-11-23 12:53:41,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2018-11-23 12:53:41,696 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:53:41,697 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:53:41,699 INFO L423 AbstractCegarLoop]: === Iteration 1 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:53:41,705 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:53:41,706 INFO L82 PathProgramCache]: Analyzing trace with hash -695557442, now seen corresponding path program 1 times [2018-11-23 12:53:41,708 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:53:41,709 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:53:41,765 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:41,766 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:41,766 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:41,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:42,104 INFO L256 TraceCheckUtils]: 0: Hoare triple {51#true} call ULTIMATE.init(); {51#true} is VALID [2018-11-23 12:53:42,107 INFO L273 TraceCheckUtils]: 1: Hoare triple {51#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {51#true} is VALID [2018-11-23 12:53:42,108 INFO L273 TraceCheckUtils]: 2: Hoare triple {51#true} assume true; {51#true} is VALID [2018-11-23 12:53:42,109 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {51#true} {51#true} #73#return; {51#true} is VALID [2018-11-23 12:53:42,109 INFO L256 TraceCheckUtils]: 4: Hoare triple {51#true} call #t~ret34 := main(); {51#true} is VALID [2018-11-23 12:53:42,109 INFO L273 TraceCheckUtils]: 5: Hoare triple {51#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {51#true} is VALID [2018-11-23 12:53:42,113 INFO L256 TraceCheckUtils]: 6: Hoare triple {51#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {53#(= 8 |my_malloc_#in~size|)} is VALID [2018-11-23 12:53:42,114 INFO L273 TraceCheckUtils]: 7: Hoare triple {53#(= 8 |my_malloc_#in~size|)} ~size := #in~size; {54#(= 8 my_malloc_~size)} is VALID [2018-11-23 12:53:42,115 INFO L256 TraceCheckUtils]: 8: Hoare triple {54#(= 8 my_malloc_~size)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {55#(= 8 |__getMemory_#in~size|)} is VALID [2018-11-23 12:53:42,116 INFO L273 TraceCheckUtils]: 9: Hoare triple {55#(= 8 |__getMemory_#in~size|)} ~size := #in~size; {56#(= __getMemory_~size 8)} is VALID [2018-11-23 12:53:42,116 INFO L273 TraceCheckUtils]: 10: Hoare triple {56#(= __getMemory_~size 8)} assume !(~size > 0); {52#false} is VALID [2018-11-23 12:53:42,117 INFO L256 TraceCheckUtils]: 11: Hoare triple {52#false} call __blast_assert(); {52#false} is VALID [2018-11-23 12:53:42,117 INFO L273 TraceCheckUtils]: 12: Hoare triple {52#false} assume !false; {52#false} is VALID [2018-11-23 12:53:42,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:53:42,124 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:53:42,124 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 12:53:42,130 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 13 [2018-11-23 12:53:42,133 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:53:42,137 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-23 12:53:42,219 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 13 edges. 13 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:42,220 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 12:53:42,230 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 12:53:42,230 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:53:42,233 INFO L87 Difference]: Start difference. First operand 48 states. Second operand 6 states. [2018-11-23 12:53:43,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:43,641 INFO L93 Difference]: Finished difference Result 86 states and 112 transitions. [2018-11-23 12:53:43,641 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:53:43,641 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 13 [2018-11-23 12:53:43,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:53:43,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 12:53:43,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 112 transitions. [2018-11-23 12:53:43,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 12:53:43,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 112 transitions. [2018-11-23 12:53:43,667 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 112 transitions. [2018-11-23 12:53:44,003 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 112 edges. 112 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:44,019 INFO L225 Difference]: With dead ends: 86 [2018-11-23 12:53:44,019 INFO L226 Difference]: Without dead ends: 40 [2018-11-23 12:53:44,023 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:53:44,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2018-11-23 12:53:44,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 40. [2018-11-23 12:53:44,081 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:53:44,082 INFO L82 GeneralOperation]: Start isEquivalent. First operand 40 states. Second operand 40 states. [2018-11-23 12:53:44,083 INFO L74 IsIncluded]: Start isIncluded. First operand 40 states. Second operand 40 states. [2018-11-23 12:53:44,083 INFO L87 Difference]: Start difference. First operand 40 states. Second operand 40 states. [2018-11-23 12:53:44,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:44,089 INFO L93 Difference]: Finished difference Result 40 states and 46 transitions. [2018-11-23 12:53:44,090 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 46 transitions. [2018-11-23 12:53:44,091 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:44,091 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:44,091 INFO L74 IsIncluded]: Start isIncluded. First operand 40 states. Second operand 40 states. [2018-11-23 12:53:44,091 INFO L87 Difference]: Start difference. First operand 40 states. Second operand 40 states. [2018-11-23 12:53:44,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:44,098 INFO L93 Difference]: Finished difference Result 40 states and 46 transitions. [2018-11-23 12:53:44,098 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 46 transitions. [2018-11-23 12:53:44,099 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:44,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:44,100 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:53:44,100 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:53:44,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40 states. [2018-11-23 12:53:44,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 46 transitions. [2018-11-23 12:53:44,107 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 46 transitions. Word has length 13 [2018-11-23 12:53:44,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:53:44,108 INFO L480 AbstractCegarLoop]: Abstraction has 40 states and 46 transitions. [2018-11-23 12:53:44,108 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 12:53:44,108 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 46 transitions. [2018-11-23 12:53:44,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 12:53:44,110 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:53:44,111 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:53:44,111 INFO L423 AbstractCegarLoop]: === Iteration 2 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:53:44,111 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:53:44,112 INFO L82 PathProgramCache]: Analyzing trace with hash -314025953, now seen corresponding path program 1 times [2018-11-23 12:53:44,112 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:53:44,112 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:53:44,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:44,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:44,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:44,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:44,369 INFO L256 TraceCheckUtils]: 0: Hoare triple {319#true} call ULTIMATE.init(); {319#true} is VALID [2018-11-23 12:53:44,370 INFO L273 TraceCheckUtils]: 1: Hoare triple {319#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {319#true} is VALID [2018-11-23 12:53:44,370 INFO L273 TraceCheckUtils]: 2: Hoare triple {319#true} assume true; {319#true} is VALID [2018-11-23 12:53:44,371 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {319#true} {319#true} #73#return; {319#true} is VALID [2018-11-23 12:53:44,371 INFO L256 TraceCheckUtils]: 4: Hoare triple {319#true} call #t~ret34 := main(); {319#true} is VALID [2018-11-23 12:53:44,371 INFO L273 TraceCheckUtils]: 5: Hoare triple {319#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {319#true} is VALID [2018-11-23 12:53:44,372 INFO L256 TraceCheckUtils]: 6: Hoare triple {319#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {319#true} is VALID [2018-11-23 12:53:44,372 INFO L273 TraceCheckUtils]: 7: Hoare triple {319#true} ~size := #in~size; {319#true} is VALID [2018-11-23 12:53:44,372 INFO L256 TraceCheckUtils]: 8: Hoare triple {319#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {319#true} is VALID [2018-11-23 12:53:44,373 INFO L273 TraceCheckUtils]: 9: Hoare triple {319#true} ~size := #in~size; {319#true} is VALID [2018-11-23 12:53:44,373 INFO L273 TraceCheckUtils]: 10: Hoare triple {319#true} assume ~size > 0; {319#true} is VALID [2018-11-23 12:53:44,374 INFO L273 TraceCheckUtils]: 11: Hoare triple {319#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {319#true} is VALID [2018-11-23 12:53:44,374 INFO L273 TraceCheckUtils]: 12: Hoare triple {319#true} assume 0 == #t~nondet29;havoc #t~nondet29;#res.base, #res.offset := 0, 0; {319#true} is VALID [2018-11-23 12:53:44,374 INFO L273 TraceCheckUtils]: 13: Hoare triple {319#true} assume true; {319#true} is VALID [2018-11-23 12:53:44,375 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {319#true} {319#true} #69#return; {319#true} is VALID [2018-11-23 12:53:44,375 INFO L273 TraceCheckUtils]: 15: Hoare triple {319#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {319#true} is VALID [2018-11-23 12:53:44,375 INFO L273 TraceCheckUtils]: 16: Hoare triple {319#true} assume true; {319#true} is VALID [2018-11-23 12:53:44,376 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {319#true} {319#true} #77#return; {319#true} is VALID [2018-11-23 12:53:44,376 INFO L273 TraceCheckUtils]: 18: Hoare triple {319#true} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {319#true} is VALID [2018-11-23 12:53:44,376 INFO L256 TraceCheckUtils]: 19: Hoare triple {319#true} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {319#true} is VALID [2018-11-23 12:53:44,377 INFO L273 TraceCheckUtils]: 20: Hoare triple {319#true} ~size := #in~size; {319#true} is VALID [2018-11-23 12:53:44,377 INFO L256 TraceCheckUtils]: 21: Hoare triple {319#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {319#true} is VALID [2018-11-23 12:53:44,378 INFO L273 TraceCheckUtils]: 22: Hoare triple {319#true} ~size := #in~size; {319#true} is VALID [2018-11-23 12:53:44,378 INFO L273 TraceCheckUtils]: 23: Hoare triple {319#true} assume ~size > 0; {319#true} is VALID [2018-11-23 12:53:44,378 INFO L273 TraceCheckUtils]: 24: Hoare triple {319#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {319#true} is VALID [2018-11-23 12:53:44,396 INFO L273 TraceCheckUtils]: 25: Hoare triple {319#true} assume 0 == #t~nondet29;havoc #t~nondet29;#res.base, #res.offset := 0, 0; {321#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:44,406 INFO L273 TraceCheckUtils]: 26: Hoare triple {321#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} assume true; {321#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:44,407 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {321#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} {319#true} #69#return; {322#(and (= 0 |my_malloc_#t~ret30.offset|) (= 0 |my_malloc_#t~ret30.base|))} is VALID [2018-11-23 12:53:44,410 INFO L273 TraceCheckUtils]: 28: Hoare triple {322#(and (= 0 |my_malloc_#t~ret30.offset|) (= 0 |my_malloc_#t~ret30.base|))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {323#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} is VALID [2018-11-23 12:53:44,410 INFO L273 TraceCheckUtils]: 29: Hoare triple {323#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} assume true; {323#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} is VALID [2018-11-23 12:53:44,412 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {323#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} {319#true} #79#return; {324#(and (= 0 |main_#t~ret33.base|) (= 0 |main_#t~ret33.offset|))} is VALID [2018-11-23 12:53:44,413 INFO L273 TraceCheckUtils]: 31: Hoare triple {324#(and (= 0 |main_#t~ret33.base|) (= 0 |main_#t~ret33.offset|))} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {325#(and (= main_~dev2~0.base 0) (= 0 main_~dev2~0.offset))} is VALID [2018-11-23 12:53:44,415 INFO L273 TraceCheckUtils]: 32: Hoare triple {325#(and (= main_~dev2~0.base 0) (= 0 main_~dev2~0.offset))} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {320#false} is VALID [2018-11-23 12:53:44,415 INFO L256 TraceCheckUtils]: 33: Hoare triple {320#false} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {320#false} is VALID [2018-11-23 12:53:44,416 INFO L273 TraceCheckUtils]: 34: Hoare triple {320#false} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {320#false} is VALID [2018-11-23 12:53:44,416 INFO L273 TraceCheckUtils]: 35: Hoare triple {320#false} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {320#false} is VALID [2018-11-23 12:53:44,417 INFO L256 TraceCheckUtils]: 36: Hoare triple {320#false} call __blast_assert(); {320#false} is VALID [2018-11-23 12:53:44,417 INFO L273 TraceCheckUtils]: 37: Hoare triple {320#false} assume !false; {320#false} is VALID [2018-11-23 12:53:44,426 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 12:53:44,427 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:53:44,427 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 12:53:44,428 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 38 [2018-11-23 12:53:44,429 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:53:44,429 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-23 12:53:44,485 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:44,485 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 12:53:44,486 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 12:53:44,486 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:53:44,486 INFO L87 Difference]: Start difference. First operand 40 states and 46 transitions. Second operand 7 states. [2018-11-23 12:53:44,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:44,994 INFO L93 Difference]: Finished difference Result 65 states and 76 transitions. [2018-11-23 12:53:44,994 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 12:53:44,994 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 38 [2018-11-23 12:53:44,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:53:44,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-23 12:53:44,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 76 transitions. [2018-11-23 12:53:44,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-23 12:53:45,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 76 transitions. [2018-11-23 12:53:45,003 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 76 transitions. [2018-11-23 12:53:45,171 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:45,175 INFO L225 Difference]: With dead ends: 65 [2018-11-23 12:53:45,175 INFO L226 Difference]: Without dead ends: 45 [2018-11-23 12:53:45,177 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:53:45,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2018-11-23 12:53:45,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2018-11-23 12:53:45,202 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:53:45,202 INFO L82 GeneralOperation]: Start isEquivalent. First operand 45 states. Second operand 45 states. [2018-11-23 12:53:45,202 INFO L74 IsIncluded]: Start isIncluded. First operand 45 states. Second operand 45 states. [2018-11-23 12:53:45,203 INFO L87 Difference]: Start difference. First operand 45 states. Second operand 45 states. [2018-11-23 12:53:45,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:45,208 INFO L93 Difference]: Finished difference Result 45 states and 51 transitions. [2018-11-23 12:53:45,208 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2018-11-23 12:53:45,209 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:45,209 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:45,210 INFO L74 IsIncluded]: Start isIncluded. First operand 45 states. Second operand 45 states. [2018-11-23 12:53:45,210 INFO L87 Difference]: Start difference. First operand 45 states. Second operand 45 states. [2018-11-23 12:53:45,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:45,215 INFO L93 Difference]: Finished difference Result 45 states and 51 transitions. [2018-11-23 12:53:45,215 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2018-11-23 12:53:45,216 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:45,216 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:45,217 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:53:45,217 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:53:45,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 45 states. [2018-11-23 12:53:45,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 51 transitions. [2018-11-23 12:53:45,220 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 51 transitions. Word has length 38 [2018-11-23 12:53:45,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:53:45,221 INFO L480 AbstractCegarLoop]: Abstraction has 45 states and 51 transitions. [2018-11-23 12:53:45,221 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 12:53:45,221 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2018-11-23 12:53:45,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 12:53:45,223 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:53:45,223 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:53:45,224 INFO L423 AbstractCegarLoop]: === Iteration 3 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:53:45,224 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:53:45,224 INFO L82 PathProgramCache]: Analyzing trace with hash -607428960, now seen corresponding path program 1 times [2018-11-23 12:53:45,224 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:53:45,225 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:53:45,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:45,226 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:45,227 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:45,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:45,471 INFO L256 TraceCheckUtils]: 0: Hoare triple {573#true} call ULTIMATE.init(); {573#true} is VALID [2018-11-23 12:53:45,472 INFO L273 TraceCheckUtils]: 1: Hoare triple {573#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {573#true} is VALID [2018-11-23 12:53:45,473 INFO L273 TraceCheckUtils]: 2: Hoare triple {573#true} assume true; {573#true} is VALID [2018-11-23 12:53:45,473 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {573#true} {573#true} #73#return; {573#true} is VALID [2018-11-23 12:53:45,473 INFO L256 TraceCheckUtils]: 4: Hoare triple {573#true} call #t~ret34 := main(); {573#true} is VALID [2018-11-23 12:53:45,474 INFO L273 TraceCheckUtils]: 5: Hoare triple {573#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {573#true} is VALID [2018-11-23 12:53:45,474 INFO L256 TraceCheckUtils]: 6: Hoare triple {573#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {573#true} is VALID [2018-11-23 12:53:45,474 INFO L273 TraceCheckUtils]: 7: Hoare triple {573#true} ~size := #in~size; {573#true} is VALID [2018-11-23 12:53:45,474 INFO L256 TraceCheckUtils]: 8: Hoare triple {573#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {573#true} is VALID [2018-11-23 12:53:45,475 INFO L273 TraceCheckUtils]: 9: Hoare triple {573#true} ~size := #in~size; {573#true} is VALID [2018-11-23 12:53:45,475 INFO L273 TraceCheckUtils]: 10: Hoare triple {573#true} assume ~size > 0; {573#true} is VALID [2018-11-23 12:53:45,475 INFO L273 TraceCheckUtils]: 11: Hoare triple {573#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {573#true} is VALID [2018-11-23 12:53:45,478 INFO L273 TraceCheckUtils]: 12: Hoare triple {573#true} assume 0 == #t~nondet29;havoc #t~nondet29;#res.base, #res.offset := 0, 0; {575#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:45,478 INFO L273 TraceCheckUtils]: 13: Hoare triple {575#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} assume true; {575#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:45,480 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {575#(and (= 0 |__getMemory_#res.base|) (= 0 |__getMemory_#res.offset|))} {573#true} #69#return; {576#(and (= 0 |my_malloc_#t~ret30.offset|) (= 0 |my_malloc_#t~ret30.base|))} is VALID [2018-11-23 12:53:45,481 INFO L273 TraceCheckUtils]: 15: Hoare triple {576#(and (= 0 |my_malloc_#t~ret30.offset|) (= 0 |my_malloc_#t~ret30.base|))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {577#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} is VALID [2018-11-23 12:53:45,481 INFO L273 TraceCheckUtils]: 16: Hoare triple {577#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} assume true; {577#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} is VALID [2018-11-23 12:53:45,482 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {577#(and (= 0 |my_malloc_#res.offset|) (= 0 |my_malloc_#res.base|))} {573#true} #77#return; {578#(and (= 0 |main_#t~ret32.offset|) (= 0 |main_#t~ret32.base|))} is VALID [2018-11-23 12:53:45,483 INFO L273 TraceCheckUtils]: 18: Hoare triple {578#(and (= 0 |main_#t~ret32.offset|) (= 0 |main_#t~ret32.base|))} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} is VALID [2018-11-23 12:53:45,483 INFO L256 TraceCheckUtils]: 19: Hoare triple {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {573#true} is VALID [2018-11-23 12:53:45,484 INFO L273 TraceCheckUtils]: 20: Hoare triple {573#true} ~size := #in~size; {573#true} is VALID [2018-11-23 12:53:45,484 INFO L256 TraceCheckUtils]: 21: Hoare triple {573#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {573#true} is VALID [2018-11-23 12:53:45,485 INFO L273 TraceCheckUtils]: 22: Hoare triple {573#true} ~size := #in~size; {573#true} is VALID [2018-11-23 12:53:45,485 INFO L273 TraceCheckUtils]: 23: Hoare triple {573#true} assume ~size > 0; {573#true} is VALID [2018-11-23 12:53:45,485 INFO L273 TraceCheckUtils]: 24: Hoare triple {573#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {573#true} is VALID [2018-11-23 12:53:45,486 INFO L273 TraceCheckUtils]: 25: Hoare triple {573#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {573#true} is VALID [2018-11-23 12:53:45,486 INFO L273 TraceCheckUtils]: 26: Hoare triple {573#true} assume true; {573#true} is VALID [2018-11-23 12:53:45,487 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {573#true} {573#true} #69#return; {573#true} is VALID [2018-11-23 12:53:45,487 INFO L273 TraceCheckUtils]: 28: Hoare triple {573#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {573#true} is VALID [2018-11-23 12:53:45,487 INFO L273 TraceCheckUtils]: 29: Hoare triple {573#true} assume true; {573#true} is VALID [2018-11-23 12:53:45,493 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {573#true} {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} #79#return; {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} is VALID [2018-11-23 12:53:45,494 INFO L273 TraceCheckUtils]: 31: Hoare triple {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} is VALID [2018-11-23 12:53:45,494 INFO L273 TraceCheckUtils]: 32: Hoare triple {579#(and (= main_~dev1~0.base 0) (= 0 main_~dev1~0.offset))} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {574#false} is VALID [2018-11-23 12:53:45,495 INFO L256 TraceCheckUtils]: 33: Hoare triple {574#false} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {574#false} is VALID [2018-11-23 12:53:45,495 INFO L273 TraceCheckUtils]: 34: Hoare triple {574#false} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {574#false} is VALID [2018-11-23 12:53:45,495 INFO L273 TraceCheckUtils]: 35: Hoare triple {574#false} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {574#false} is VALID [2018-11-23 12:53:45,496 INFO L256 TraceCheckUtils]: 36: Hoare triple {574#false} call __blast_assert(); {574#false} is VALID [2018-11-23 12:53:45,496 INFO L273 TraceCheckUtils]: 37: Hoare triple {574#false} assume !false; {574#false} is VALID [2018-11-23 12:53:45,500 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 12:53:45,501 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 12:53:45,501 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 12:53:45,526 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:45,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:45,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:45,607 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 12:53:46,554 INFO L256 TraceCheckUtils]: 0: Hoare triple {573#true} call ULTIMATE.init(); {573#true} is VALID [2018-11-23 12:53:46,555 INFO L273 TraceCheckUtils]: 1: Hoare triple {573#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,556 INFO L273 TraceCheckUtils]: 2: Hoare triple {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume true; {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,560 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} {573#true} #73#return; {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,561 INFO L256 TraceCheckUtils]: 4: Hoare triple {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret34 := main(); {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,562 INFO L273 TraceCheckUtils]: 5: Hoare triple {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,563 INFO L256 TraceCheckUtils]: 6: Hoare triple {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,564 INFO L273 TraceCheckUtils]: 7: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~size := #in~size; {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,565 INFO L256 TraceCheckUtils]: 8: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,565 INFO L273 TraceCheckUtils]: 9: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~size := #in~size; {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,566 INFO L273 TraceCheckUtils]: 10: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume ~size > 0; {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,567 INFO L273 TraceCheckUtils]: 11: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,568 INFO L273 TraceCheckUtils]: 12: Hoare triple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume 0 == #t~nondet29;havoc #t~nondet29;#res.base, #res.offset := 0, 0; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,569 INFO L273 TraceCheckUtils]: 13: Hoare triple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume true; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,570 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #69#return; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,576 INFO L273 TraceCheckUtils]: 15: Hoare triple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,577 INFO L273 TraceCheckUtils]: 16: Hoare triple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume true; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,579 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} {586#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #77#return; {637#(and (<= 1 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,580 INFO L273 TraceCheckUtils]: 18: Hoare triple {637#(and (<= 1 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {637#(and (<= 1 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,580 INFO L256 TraceCheckUtils]: 19: Hoare triple {637#(and (<= 1 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,581 INFO L273 TraceCheckUtils]: 20: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~size := #in~size; {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,582 INFO L256 TraceCheckUtils]: 21: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,583 INFO L273 TraceCheckUtils]: 22: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~size := #in~size; {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,584 INFO L273 TraceCheckUtils]: 23: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume ~size > 0; {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,586 INFO L273 TraceCheckUtils]: 24: Hoare triple {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,587 INFO L273 TraceCheckUtils]: 25: Hoare triple {618#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {662#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,589 INFO L273 TraceCheckUtils]: 26: Hoare triple {662#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} assume true; {662#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,591 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {662#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} {602#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #69#return; {669#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,593 INFO L273 TraceCheckUtils]: 28: Hoare triple {669#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|) (<= ~elem~0.offset 0))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {673#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,594 INFO L273 TraceCheckUtils]: 29: Hoare triple {673#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume true; {673#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,599 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {673#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} {637#(and (<= 1 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #79#return; {680#(and (<= ~elem~0.offset 0) (<= 2 |main_#t~ret33.offset|))} is VALID [2018-11-23 12:53:46,602 INFO L273 TraceCheckUtils]: 31: Hoare triple {680#(and (<= ~elem~0.offset 0) (<= 2 |main_#t~ret33.offset|))} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {684#(and (<= 2 main_~dev2~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,617 INFO L273 TraceCheckUtils]: 32: Hoare triple {684#(and (<= 2 main_~dev2~0.offset) (<= ~elem~0.offset 0))} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {684#(and (<= 2 main_~dev2~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,619 INFO L256 TraceCheckUtils]: 33: Hoare triple {684#(and (<= 2 main_~dev2~0.offset) (<= ~elem~0.offset 0))} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {691#(and (<= 2 |list_add_#in~new.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,620 INFO L273 TraceCheckUtils]: 34: Hoare triple {691#(and (<= 2 |list_add_#in~new.offset|) (<= ~elem~0.offset 0))} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {695#(and (<= 2 list_add_~new.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:46,622 INFO L273 TraceCheckUtils]: 35: Hoare triple {695#(and (<= 2 list_add_~new.offset) (<= ~elem~0.offset 0))} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {574#false} is VALID [2018-11-23 12:53:46,622 INFO L256 TraceCheckUtils]: 36: Hoare triple {574#false} call __blast_assert(); {574#false} is VALID [2018-11-23 12:53:46,623 INFO L273 TraceCheckUtils]: 37: Hoare triple {574#false} assume !false; {574#false} is VALID [2018-11-23 12:53:46,629 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 12:53:46,651 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 12:53:46,651 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [7] total 18 [2018-11-23 12:53:46,652 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 38 [2018-11-23 12:53:46,652 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:53:46,652 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 18 states. [2018-11-23 12:53:46,779 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:46,779 INFO L459 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-11-23 12:53:46,780 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-11-23 12:53:46,780 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:53:46,780 INFO L87 Difference]: Start difference. First operand 45 states and 51 transitions. Second operand 18 states. [2018-11-23 12:53:51,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:51,221 INFO L93 Difference]: Finished difference Result 97 states and 117 transitions. [2018-11-23 12:53:51,221 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-23 12:53:51,221 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 38 [2018-11-23 12:53:51,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:53:51,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18 states. [2018-11-23 12:53:51,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 117 transitions. [2018-11-23 12:53:51,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18 states. [2018-11-23 12:53:51,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 117 transitions. [2018-11-23 12:53:51,232 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 21 states and 117 transitions. [2018-11-23 12:53:51,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 117 edges. 117 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:51,391 INFO L225 Difference]: With dead ends: 97 [2018-11-23 12:53:51,392 INFO L226 Difference]: Without dead ends: 70 [2018-11-23 12:53:51,393 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=203, Invalid=987, Unknown=0, NotChecked=0, Total=1190 [2018-11-23 12:53:51,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2018-11-23 12:53:51,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 60. [2018-11-23 12:53:51,467 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:53:51,468 INFO L82 GeneralOperation]: Start isEquivalent. First operand 70 states. Second operand 60 states. [2018-11-23 12:53:51,468 INFO L74 IsIncluded]: Start isIncluded. First operand 70 states. Second operand 60 states. [2018-11-23 12:53:51,468 INFO L87 Difference]: Start difference. First operand 70 states. Second operand 60 states. [2018-11-23 12:53:51,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:51,474 INFO L93 Difference]: Finished difference Result 70 states and 82 transitions. [2018-11-23 12:53:51,474 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 82 transitions. [2018-11-23 12:53:51,475 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:51,475 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:51,476 INFO L74 IsIncluded]: Start isIncluded. First operand 60 states. Second operand 70 states. [2018-11-23 12:53:51,476 INFO L87 Difference]: Start difference. First operand 60 states. Second operand 70 states. [2018-11-23 12:53:51,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:51,481 INFO L93 Difference]: Finished difference Result 70 states and 82 transitions. [2018-11-23 12:53:51,481 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 82 transitions. [2018-11-23 12:53:51,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:51,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:51,482 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:53:51,482 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:53:51,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60 states. [2018-11-23 12:53:51,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 72 transitions. [2018-11-23 12:53:51,486 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 72 transitions. Word has length 38 [2018-11-23 12:53:51,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:53:51,487 INFO L480 AbstractCegarLoop]: Abstraction has 60 states and 72 transitions. [2018-11-23 12:53:51,487 INFO L481 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-11-23 12:53:51,487 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 72 transitions. [2018-11-23 12:53:51,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 12:53:51,488 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:53:51,489 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:53:51,489 INFO L423 AbstractCegarLoop]: === Iteration 4 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:53:51,489 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:53:51,489 INFO L82 PathProgramCache]: Analyzing trace with hash 1122798515, now seen corresponding path program 1 times [2018-11-23 12:53:51,489 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:53:51,490 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:53:51,491 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:51,491 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:51,491 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:51,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:52,051 INFO L256 TraceCheckUtils]: 0: Hoare triple {1103#true} call ULTIMATE.init(); {1103#true} is VALID [2018-11-23 12:53:52,052 INFO L273 TraceCheckUtils]: 1: Hoare triple {1103#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {1103#true} is VALID [2018-11-23 12:53:52,052 INFO L273 TraceCheckUtils]: 2: Hoare triple {1103#true} assume true; {1103#true} is VALID [2018-11-23 12:53:52,052 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1103#true} {1103#true} #73#return; {1103#true} is VALID [2018-11-23 12:53:52,053 INFO L256 TraceCheckUtils]: 4: Hoare triple {1103#true} call #t~ret34 := main(); {1103#true} is VALID [2018-11-23 12:53:52,053 INFO L273 TraceCheckUtils]: 5: Hoare triple {1103#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {1103#true} is VALID [2018-11-23 12:53:52,054 INFO L256 TraceCheckUtils]: 6: Hoare triple {1103#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {1103#true} is VALID [2018-11-23 12:53:52,054 INFO L273 TraceCheckUtils]: 7: Hoare triple {1103#true} ~size := #in~size; {1103#true} is VALID [2018-11-23 12:53:52,054 INFO L256 TraceCheckUtils]: 8: Hoare triple {1103#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1103#true} is VALID [2018-11-23 12:53:52,054 INFO L273 TraceCheckUtils]: 9: Hoare triple {1103#true} ~size := #in~size; {1103#true} is VALID [2018-11-23 12:53:52,055 INFO L273 TraceCheckUtils]: 10: Hoare triple {1103#true} assume ~size > 0; {1103#true} is VALID [2018-11-23 12:53:52,055 INFO L273 TraceCheckUtils]: 11: Hoare triple {1103#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1103#true} is VALID [2018-11-23 12:53:52,056 INFO L273 TraceCheckUtils]: 12: Hoare triple {1103#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,057 INFO L273 TraceCheckUtils]: 13: Hoare triple {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,058 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} {1103#true} #69#return; {1106#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,063 INFO L273 TraceCheckUtils]: 15: Hoare triple {1106#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,063 INFO L273 TraceCheckUtils]: 16: Hoare triple {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,064 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} {1103#true} #77#return; {1108#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,064 INFO L273 TraceCheckUtils]: 18: Hoare triple {1108#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {1109#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,065 INFO L256 TraceCheckUtils]: 19: Hoare triple {1109#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,065 INFO L273 TraceCheckUtils]: 20: Hoare triple {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,066 INFO L256 TraceCheckUtils]: 21: Hoare triple {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,066 INFO L273 TraceCheckUtils]: 22: Hoare triple {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,067 INFO L273 TraceCheckUtils]: 23: Hoare triple {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} assume ~size > 0; {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,068 INFO L273 TraceCheckUtils]: 24: Hoare triple {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1111#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,069 INFO L273 TraceCheckUtils]: 25: Hoare triple {1111#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1112#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} is VALID [2018-11-23 12:53:52,069 INFO L273 TraceCheckUtils]: 26: Hoare triple {1112#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} assume true; {1112#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} is VALID [2018-11-23 12:53:52,070 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {1112#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} {1110#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {1113#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#t~ret30.offset|)} is VALID [2018-11-23 12:53:52,070 INFO L273 TraceCheckUtils]: 28: Hoare triple {1113#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#t~ret30.offset|)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1114#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} is VALID [2018-11-23 12:53:52,071 INFO L273 TraceCheckUtils]: 29: Hoare triple {1114#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} assume true; {1114#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} is VALID [2018-11-23 12:53:52,072 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {1114#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} {1109#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} #79#return; {1115#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} is VALID [2018-11-23 12:53:52,073 INFO L273 TraceCheckUtils]: 31: Hoare triple {1115#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:53:52,074 INFO L273 TraceCheckUtils]: 32: Hoare triple {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:53:52,074 INFO L256 TraceCheckUtils]: 33: Hoare triple {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {1103#true} is VALID [2018-11-23 12:53:52,075 INFO L273 TraceCheckUtils]: 34: Hoare triple {1103#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} is VALID [2018-11-23 12:53:52,075 INFO L273 TraceCheckUtils]: 35: Hoare triple {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} is VALID [2018-11-23 12:53:52,076 INFO L273 TraceCheckUtils]: 36: Hoare triple {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} is VALID [2018-11-23 12:53:52,077 INFO L273 TraceCheckUtils]: 37: Hoare triple {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} is VALID [2018-11-23 12:53:52,077 INFO L273 TraceCheckUtils]: 38: Hoare triple {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} assume true; {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} is VALID [2018-11-23 12:53:52,079 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #81#return; {1119#(<= (+ main_~dev1~0.offset 1) ~elem~0.offset)} is VALID [2018-11-23 12:53:52,081 INFO L256 TraceCheckUtils]: 40: Hoare triple {1119#(<= (+ main_~dev1~0.offset 1) ~elem~0.offset)} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {1120#(<= (+ |list_add_#in~new.offset| 1) ~elem~0.offset)} is VALID [2018-11-23 12:53:52,082 INFO L273 TraceCheckUtils]: 41: Hoare triple {1120#(<= (+ |list_add_#in~new.offset| 1) ~elem~0.offset)} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1121#(not (= list_add_~new.offset ~elem~0.offset))} is VALID [2018-11-23 12:53:52,082 INFO L273 TraceCheckUtils]: 42: Hoare triple {1121#(not (= list_add_~new.offset ~elem~0.offset))} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {1104#false} is VALID [2018-11-23 12:53:52,082 INFO L256 TraceCheckUtils]: 43: Hoare triple {1104#false} call __blast_assert(); {1104#false} is VALID [2018-11-23 12:53:52,083 INFO L273 TraceCheckUtils]: 44: Hoare triple {1104#false} assume !false; {1104#false} is VALID [2018-11-23 12:53:52,085 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:53:52,085 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 12:53:52,085 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 12:53:52,103 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:52,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:52,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:52,172 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 12:53:52,678 INFO L256 TraceCheckUtils]: 0: Hoare triple {1103#true} call ULTIMATE.init(); {1103#true} is VALID [2018-11-23 12:53:52,678 INFO L273 TraceCheckUtils]: 1: Hoare triple {1103#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {1103#true} is VALID [2018-11-23 12:53:52,678 INFO L273 TraceCheckUtils]: 2: Hoare triple {1103#true} assume true; {1103#true} is VALID [2018-11-23 12:53:52,679 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1103#true} {1103#true} #73#return; {1103#true} is VALID [2018-11-23 12:53:52,679 INFO L256 TraceCheckUtils]: 4: Hoare triple {1103#true} call #t~ret34 := main(); {1103#true} is VALID [2018-11-23 12:53:52,679 INFO L273 TraceCheckUtils]: 5: Hoare triple {1103#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {1103#true} is VALID [2018-11-23 12:53:52,680 INFO L256 TraceCheckUtils]: 6: Hoare triple {1103#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {1103#true} is VALID [2018-11-23 12:53:52,680 INFO L273 TraceCheckUtils]: 7: Hoare triple {1103#true} ~size := #in~size; {1103#true} is VALID [2018-11-23 12:53:52,680 INFO L256 TraceCheckUtils]: 8: Hoare triple {1103#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1103#true} is VALID [2018-11-23 12:53:52,680 INFO L273 TraceCheckUtils]: 9: Hoare triple {1103#true} ~size := #in~size; {1103#true} is VALID [2018-11-23 12:53:52,680 INFO L273 TraceCheckUtils]: 10: Hoare triple {1103#true} assume ~size > 0; {1103#true} is VALID [2018-11-23 12:53:52,681 INFO L273 TraceCheckUtils]: 11: Hoare triple {1103#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1103#true} is VALID [2018-11-23 12:53:52,681 INFO L273 TraceCheckUtils]: 12: Hoare triple {1103#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,682 INFO L273 TraceCheckUtils]: 13: Hoare triple {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,682 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {1105#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} {1103#true} #69#return; {1106#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,683 INFO L273 TraceCheckUtils]: 15: Hoare triple {1106#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,683 INFO L273 TraceCheckUtils]: 16: Hoare triple {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,684 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {1107#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} {1103#true} #77#return; {1108#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,685 INFO L273 TraceCheckUtils]: 18: Hoare triple {1108#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {1109#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,686 INFO L256 TraceCheckUtils]: 19: Hoare triple {1109#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,687 INFO L273 TraceCheckUtils]: 20: Hoare triple {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,688 INFO L256 TraceCheckUtils]: 21: Hoare triple {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,689 INFO L273 TraceCheckUtils]: 22: Hoare triple {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,689 INFO L273 TraceCheckUtils]: 23: Hoare triple {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} assume ~size > 0; {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,690 INFO L273 TraceCheckUtils]: 24: Hoare triple {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1111#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:52,691 INFO L273 TraceCheckUtils]: 25: Hoare triple {1111#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1201#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:52,691 INFO L273 TraceCheckUtils]: 26: Hoare triple {1201#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} assume true; {1201#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:52,693 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {1201#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} {1182#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {1208#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|))} is VALID [2018-11-23 12:53:52,694 INFO L273 TraceCheckUtils]: 28: Hoare triple {1208#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1212#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:53:52,695 INFO L273 TraceCheckUtils]: 29: Hoare triple {1212#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} assume true; {1212#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:53:52,696 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {1212#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} {1109#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} #79#return; {1115#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} is VALID [2018-11-23 12:53:52,697 INFO L273 TraceCheckUtils]: 31: Hoare triple {1115#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:53:52,698 INFO L273 TraceCheckUtils]: 32: Hoare triple {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:53:52,698 INFO L256 TraceCheckUtils]: 33: Hoare triple {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {1103#true} is VALID [2018-11-23 12:53:52,699 INFO L273 TraceCheckUtils]: 34: Hoare triple {1103#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} is VALID [2018-11-23 12:53:52,699 INFO L273 TraceCheckUtils]: 35: Hoare triple {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} is VALID [2018-11-23 12:53:52,700 INFO L273 TraceCheckUtils]: 36: Hoare triple {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} is VALID [2018-11-23 12:53:52,701 INFO L273 TraceCheckUtils]: 37: Hoare triple {1117#(<= |list_add_#in~new.offset| list_add_~new.offset)} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} is VALID [2018-11-23 12:53:52,702 INFO L273 TraceCheckUtils]: 38: Hoare triple {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} assume true; {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} is VALID [2018-11-23 12:53:52,704 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {1118#(<= |list_add_#in~new.offset| ~elem~0.offset)} {1116#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #81#return; {1119#(<= (+ main_~dev1~0.offset 1) ~elem~0.offset)} is VALID [2018-11-23 12:53:52,706 INFO L256 TraceCheckUtils]: 40: Hoare triple {1119#(<= (+ main_~dev1~0.offset 1) ~elem~0.offset)} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {1120#(<= (+ |list_add_#in~new.offset| 1) ~elem~0.offset)} is VALID [2018-11-23 12:53:52,707 INFO L273 TraceCheckUtils]: 41: Hoare triple {1120#(<= (+ |list_add_#in~new.offset| 1) ~elem~0.offset)} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1252#(<= (+ list_add_~new.offset 1) ~elem~0.offset)} is VALID [2018-11-23 12:53:52,708 INFO L273 TraceCheckUtils]: 42: Hoare triple {1252#(<= (+ list_add_~new.offset 1) ~elem~0.offset)} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {1104#false} is VALID [2018-11-23 12:53:52,708 INFO L256 TraceCheckUtils]: 43: Hoare triple {1104#false} call __blast_assert(); {1104#false} is VALID [2018-11-23 12:53:52,708 INFO L273 TraceCheckUtils]: 44: Hoare triple {1104#false} assume !false; {1104#false} is VALID [2018-11-23 12:53:52,711 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:53:52,733 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 12:53:52,733 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19] total 24 [2018-11-23 12:53:52,733 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 45 [2018-11-23 12:53:52,734 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:53:52,734 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 24 states. [2018-11-23 12:53:52,817 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:52,817 INFO L459 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-11-23 12:53:52,817 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-11-23 12:53:52,818 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=494, Unknown=0, NotChecked=0, Total=552 [2018-11-23 12:53:52,818 INFO L87 Difference]: Start difference. First operand 60 states and 72 transitions. Second operand 24 states. [2018-11-23 12:53:56,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:56,155 INFO L93 Difference]: Finished difference Result 73 states and 87 transitions. [2018-11-23 12:53:56,155 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-23 12:53:56,155 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 45 [2018-11-23 12:53:56,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:53:56,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24 states. [2018-11-23 12:53:56,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 64 transitions. [2018-11-23 12:53:56,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24 states. [2018-11-23 12:53:56,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 64 transitions. [2018-11-23 12:53:56,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 16 states and 64 transitions. [2018-11-23 12:53:56,257 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:56,261 INFO L225 Difference]: With dead ends: 73 [2018-11-23 12:53:56,261 INFO L226 Difference]: Without dead ends: 69 [2018-11-23 12:53:56,262 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 41 SyntacticMatches, 1 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 130 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=142, Invalid=1118, Unknown=0, NotChecked=0, Total=1260 [2018-11-23 12:53:56,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2018-11-23 12:53:56,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 68. [2018-11-23 12:53:56,371 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:53:56,371 INFO L82 GeneralOperation]: Start isEquivalent. First operand 69 states. Second operand 68 states. [2018-11-23 12:53:56,371 INFO L74 IsIncluded]: Start isIncluded. First operand 69 states. Second operand 68 states. [2018-11-23 12:53:56,371 INFO L87 Difference]: Start difference. First operand 69 states. Second operand 68 states. [2018-11-23 12:53:56,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:56,377 INFO L93 Difference]: Finished difference Result 69 states and 81 transitions. [2018-11-23 12:53:56,377 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 81 transitions. [2018-11-23 12:53:56,378 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:56,378 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:56,378 INFO L74 IsIncluded]: Start isIncluded. First operand 68 states. Second operand 69 states. [2018-11-23 12:53:56,378 INFO L87 Difference]: Start difference. First operand 68 states. Second operand 69 states. [2018-11-23 12:53:56,382 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:53:56,383 INFO L93 Difference]: Finished difference Result 69 states and 81 transitions. [2018-11-23 12:53:56,383 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 81 transitions. [2018-11-23 12:53:56,383 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:53:56,384 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:53:56,384 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:53:56,384 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:53:56,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 68 states. [2018-11-23 12:53:56,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 79 transitions. [2018-11-23 12:53:56,388 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 79 transitions. Word has length 45 [2018-11-23 12:53:56,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:53:56,388 INFO L480 AbstractCegarLoop]: Abstraction has 68 states and 79 transitions. [2018-11-23 12:53:56,389 INFO L481 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-11-23 12:53:56,389 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 79 transitions. [2018-11-23 12:53:56,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 12:53:56,390 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:53:56,390 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:53:56,390 INFO L423 AbstractCegarLoop]: === Iteration 5 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:53:56,391 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:53:56,391 INFO L82 PathProgramCache]: Analyzing trace with hash 313451889, now seen corresponding path program 1 times [2018-11-23 12:53:56,391 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:53:56,391 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:53:56,392 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:56,393 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:56,393 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:53:56,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:56,713 INFO L256 TraceCheckUtils]: 0: Hoare triple {1620#true} call ULTIMATE.init(); {1620#true} is VALID [2018-11-23 12:53:56,714 INFO L273 TraceCheckUtils]: 1: Hoare triple {1620#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,715 INFO L273 TraceCheckUtils]: 2: Hoare triple {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} assume true; {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,716 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} {1620#true} #73#return; {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,717 INFO L256 TraceCheckUtils]: 4: Hoare triple {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} call #t~ret34 := main(); {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,717 INFO L273 TraceCheckUtils]: 5: Hoare triple {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,718 INFO L256 TraceCheckUtils]: 6: Hoare triple {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {1623#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:56,719 INFO L273 TraceCheckUtils]: 7: Hoare triple {1623#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {1623#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:53:56,720 INFO L256 TraceCheckUtils]: 8: Hoare triple {1623#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1624#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:53:56,721 INFO L273 TraceCheckUtils]: 9: Hoare triple {1624#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} ~size := #in~size; {1624#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:53:56,723 INFO L273 TraceCheckUtils]: 10: Hoare triple {1624#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} assume ~size > 0; {1624#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:53:56,724 INFO L273 TraceCheckUtils]: 11: Hoare triple {1624#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1625#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:53:56,724 INFO L273 TraceCheckUtils]: 12: Hoare triple {1625#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1626#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:56,725 INFO L273 TraceCheckUtils]: 13: Hoare triple {1626#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |__getMemory_#res.offset|))} assume true; {1626#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |__getMemory_#res.offset|))} is VALID [2018-11-23 12:53:56,727 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {1626#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |__getMemory_#res.offset|))} {1623#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {1627#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |my_malloc_#t~ret30.offset|))} is VALID [2018-11-23 12:53:56,728 INFO L273 TraceCheckUtils]: 15: Hoare triple {1627#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |my_malloc_#t~ret30.offset|))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1628#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |my_malloc_#res.offset|))} is VALID [2018-11-23 12:53:56,729 INFO L273 TraceCheckUtils]: 16: Hoare triple {1628#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |my_malloc_#res.offset|))} assume true; {1628#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |my_malloc_#res.offset|))} is VALID [2018-11-23 12:53:56,732 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {1628#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 |my_malloc_#res.offset|))} {1622#(and (= 0 ~guard_malloc_counter~0.offset) (= 0 ~elem~0.offset))} #77#return; {1629#(and (= 0 ~elem~0.offset) (<= 1 |main_#t~ret32.offset|))} is VALID [2018-11-23 12:53:56,735 INFO L273 TraceCheckUtils]: 18: Hoare triple {1629#(and (= 0 ~elem~0.offset) (<= 1 |main_#t~ret32.offset|))} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,735 INFO L256 TraceCheckUtils]: 19: Hoare triple {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {1620#true} is VALID [2018-11-23 12:53:56,735 INFO L273 TraceCheckUtils]: 20: Hoare triple {1620#true} ~size := #in~size; {1620#true} is VALID [2018-11-23 12:53:56,736 INFO L256 TraceCheckUtils]: 21: Hoare triple {1620#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1620#true} is VALID [2018-11-23 12:53:56,736 INFO L273 TraceCheckUtils]: 22: Hoare triple {1620#true} ~size := #in~size; {1620#true} is VALID [2018-11-23 12:53:56,736 INFO L273 TraceCheckUtils]: 23: Hoare triple {1620#true} assume ~size > 0; {1620#true} is VALID [2018-11-23 12:53:56,736 INFO L273 TraceCheckUtils]: 24: Hoare triple {1620#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1620#true} is VALID [2018-11-23 12:53:56,736 INFO L273 TraceCheckUtils]: 25: Hoare triple {1620#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1620#true} is VALID [2018-11-23 12:53:56,737 INFO L273 TraceCheckUtils]: 26: Hoare triple {1620#true} assume true; {1620#true} is VALID [2018-11-23 12:53:56,737 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {1620#true} {1620#true} #69#return; {1620#true} is VALID [2018-11-23 12:53:56,737 INFO L273 TraceCheckUtils]: 28: Hoare triple {1620#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1620#true} is VALID [2018-11-23 12:53:56,737 INFO L273 TraceCheckUtils]: 29: Hoare triple {1620#true} assume true; {1620#true} is VALID [2018-11-23 12:53:56,738 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {1620#true} {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} #79#return; {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,738 INFO L273 TraceCheckUtils]: 31: Hoare triple {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,740 INFO L273 TraceCheckUtils]: 32: Hoare triple {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,742 INFO L256 TraceCheckUtils]: 33: Hoare triple {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:53:56,742 INFO L273 TraceCheckUtils]: 34: Hoare triple {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:53:56,743 INFO L273 TraceCheckUtils]: 35: Hoare triple {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:53:56,745 INFO L273 TraceCheckUtils]: 36: Hoare triple {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:53:56,749 INFO L273 TraceCheckUtils]: 37: Hoare triple {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} assume !(0 != #t~nondet31);havoc #t~nondet31; {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:53:56,753 INFO L273 TraceCheckUtils]: 38: Hoare triple {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} assume true; {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:53:56,756 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {1631#(= |old(~elem~0.offset)| ~elem~0.offset)} {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} #81#return; {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,758 INFO L256 TraceCheckUtils]: 40: Hoare triple {1630#(and (<= 1 main_~dev1~0.offset) (= 0 ~elem~0.offset))} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {1632#(and (<= 1 |list_add_#in~new.offset|) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,779 INFO L273 TraceCheckUtils]: 41: Hoare triple {1632#(and (<= 1 |list_add_#in~new.offset|) (= 0 ~elem~0.offset))} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1633#(and (not (= list_add_~new.offset 0)) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:53:56,794 INFO L273 TraceCheckUtils]: 42: Hoare triple {1633#(and (not (= list_add_~new.offset 0)) (= 0 ~elem~0.offset))} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {1621#false} is VALID [2018-11-23 12:53:56,794 INFO L256 TraceCheckUtils]: 43: Hoare triple {1621#false} call __blast_assert(); {1621#false} is VALID [2018-11-23 12:53:56,794 INFO L273 TraceCheckUtils]: 44: Hoare triple {1621#false} assume !false; {1621#false} is VALID [2018-11-23 12:53:56,797 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:53:56,798 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 12:53:56,798 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 12:53:56,808 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:53:56,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:56,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:53:56,888 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 12:53:57,901 INFO L256 TraceCheckUtils]: 0: Hoare triple {1620#true} call ULTIMATE.init(); {1620#true} is VALID [2018-11-23 12:53:57,902 INFO L273 TraceCheckUtils]: 1: Hoare triple {1620#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,903 INFO L273 TraceCheckUtils]: 2: Hoare triple {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume true; {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,904 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} {1620#true} #73#return; {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,905 INFO L256 TraceCheckUtils]: 4: Hoare triple {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret34 := main(); {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,905 INFO L273 TraceCheckUtils]: 5: Hoare triple {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,906 INFO L256 TraceCheckUtils]: 6: Hoare triple {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,907 INFO L273 TraceCheckUtils]: 7: Hoare triple {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~size := #in~size; {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,908 INFO L256 TraceCheckUtils]: 8: Hoare triple {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,909 INFO L273 TraceCheckUtils]: 9: Hoare triple {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} ~size := #in~size; {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,909 INFO L273 TraceCheckUtils]: 10: Hoare triple {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume ~size > 0; {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,911 INFO L273 TraceCheckUtils]: 11: Hoare triple {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1672#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,911 INFO L273 TraceCheckUtils]: 12: Hoare triple {1672#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1676#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,912 INFO L273 TraceCheckUtils]: 13: Hoare triple {1676#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} assume true; {1676#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,914 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {1676#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|) (<= ~elem~0.offset 0))} {1656#(and (<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #69#return; {1683#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,915 INFO L273 TraceCheckUtils]: 15: Hoare triple {1683#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|) (<= ~elem~0.offset 0))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1687#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,916 INFO L273 TraceCheckUtils]: 16: Hoare triple {1687#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} assume true; {1687#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,917 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {1687#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} {1640#(and (<= 0 ~guard_malloc_counter~0.offset) (<= ~elem~0.offset 0))} #77#return; {1694#(and (<= 1 |main_#t~ret32.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,918 INFO L273 TraceCheckUtils]: 18: Hoare triple {1694#(and (<= 1 |main_#t~ret32.offset|) (<= ~elem~0.offset 0))} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,919 INFO L256 TraceCheckUtils]: 19: Hoare triple {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,919 INFO L273 TraceCheckUtils]: 20: Hoare triple {1702#(<= ~elem~0.offset 0)} ~size := #in~size; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,920 INFO L256 TraceCheckUtils]: 21: Hoare triple {1702#(<= ~elem~0.offset 0)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,921 INFO L273 TraceCheckUtils]: 22: Hoare triple {1702#(<= ~elem~0.offset 0)} ~size := #in~size; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,921 INFO L273 TraceCheckUtils]: 23: Hoare triple {1702#(<= ~elem~0.offset 0)} assume ~size > 0; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,922 INFO L273 TraceCheckUtils]: 24: Hoare triple {1702#(<= ~elem~0.offset 0)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,922 INFO L273 TraceCheckUtils]: 25: Hoare triple {1702#(<= ~elem~0.offset 0)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,923 INFO L273 TraceCheckUtils]: 26: Hoare triple {1702#(<= ~elem~0.offset 0)} assume true; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,924 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {1702#(<= ~elem~0.offset 0)} {1702#(<= ~elem~0.offset 0)} #69#return; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,925 INFO L273 TraceCheckUtils]: 28: Hoare triple {1702#(<= ~elem~0.offset 0)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,925 INFO L273 TraceCheckUtils]: 29: Hoare triple {1702#(<= ~elem~0.offset 0)} assume true; {1702#(<= ~elem~0.offset 0)} is VALID [2018-11-23 12:53:57,926 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {1702#(<= ~elem~0.offset 0)} {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} #79#return; {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,927 INFO L273 TraceCheckUtils]: 31: Hoare triple {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,928 INFO L273 TraceCheckUtils]: 32: Hoare triple {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,930 INFO L256 TraceCheckUtils]: 33: Hoare triple {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:53:57,930 INFO L273 TraceCheckUtils]: 34: Hoare triple {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:53:57,931 INFO L273 TraceCheckUtils]: 35: Hoare triple {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:53:57,931 INFO L273 TraceCheckUtils]: 36: Hoare triple {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:53:57,932 INFO L273 TraceCheckUtils]: 37: Hoare triple {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} assume !(0 != #t~nondet31);havoc #t~nondet31; {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:53:57,933 INFO L273 TraceCheckUtils]: 38: Hoare triple {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} assume true; {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:53:57,934 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {1745#(<= ~elem~0.offset |old(~elem~0.offset)|)} {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} #81#return; {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,936 INFO L256 TraceCheckUtils]: 40: Hoare triple {1698#(and (<= 1 main_~dev1~0.offset) (<= ~elem~0.offset 0))} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {1767#(and (<= 1 |list_add_#in~new.offset|) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,937 INFO L273 TraceCheckUtils]: 41: Hoare triple {1767#(and (<= 1 |list_add_#in~new.offset|) (<= ~elem~0.offset 0))} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {1771#(and (<= 1 list_add_~new.offset) (<= ~elem~0.offset 0))} is VALID [2018-11-23 12:53:57,938 INFO L273 TraceCheckUtils]: 42: Hoare triple {1771#(and (<= 1 list_add_~new.offset) (<= ~elem~0.offset 0))} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {1621#false} is VALID [2018-11-23 12:53:57,938 INFO L256 TraceCheckUtils]: 43: Hoare triple {1621#false} call __blast_assert(); {1621#false} is VALID [2018-11-23 12:53:57,938 INFO L273 TraceCheckUtils]: 44: Hoare triple {1621#false} assume !false; {1621#false} is VALID [2018-11-23 12:53:57,943 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:53:57,961 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 12:53:57,962 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14] total 26 [2018-11-23 12:53:57,962 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 45 [2018-11-23 12:53:57,963 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:53:57,963 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 26 states. [2018-11-23 12:53:58,050 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:53:58,050 INFO L459 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-11-23 12:53:58,050 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-11-23 12:53:58,051 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=85, Invalid=565, Unknown=0, NotChecked=0, Total=650 [2018-11-23 12:53:58,051 INFO L87 Difference]: Start difference. First operand 68 states and 79 transitions. Second operand 26 states. [2018-11-23 12:54:02,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:02,551 INFO L93 Difference]: Finished difference Result 99 states and 113 transitions. [2018-11-23 12:54:02,551 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-11-23 12:54:02,551 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 45 [2018-11-23 12:54:02,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:54:02,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2018-11-23 12:54:02,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 107 transitions. [2018-11-23 12:54:02,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2018-11-23 12:54:02,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 107 transitions. [2018-11-23 12:54:02,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 23 states and 107 transitions. [2018-11-23 12:54:02,759 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 107 edges. 107 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:02,762 INFO L225 Difference]: With dead ends: 99 [2018-11-23 12:54:02,762 INFO L226 Difference]: Without dead ends: 77 [2018-11-23 12:54:02,764 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=307, Invalid=1585, Unknown=0, NotChecked=0, Total=1892 [2018-11-23 12:54:02,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2018-11-23 12:54:02,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 59. [2018-11-23 12:54:02,845 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:54:02,845 INFO L82 GeneralOperation]: Start isEquivalent. First operand 77 states. Second operand 59 states. [2018-11-23 12:54:02,845 INFO L74 IsIncluded]: Start isIncluded. First operand 77 states. Second operand 59 states. [2018-11-23 12:54:02,845 INFO L87 Difference]: Start difference. First operand 77 states. Second operand 59 states. [2018-11-23 12:54:02,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:02,850 INFO L93 Difference]: Finished difference Result 77 states and 86 transitions. [2018-11-23 12:54:02,850 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 86 transitions. [2018-11-23 12:54:02,851 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:02,851 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:02,851 INFO L74 IsIncluded]: Start isIncluded. First operand 59 states. Second operand 77 states. [2018-11-23 12:54:02,851 INFO L87 Difference]: Start difference. First operand 59 states. Second operand 77 states. [2018-11-23 12:54:02,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:02,855 INFO L93 Difference]: Finished difference Result 77 states and 86 transitions. [2018-11-23 12:54:02,855 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 86 transitions. [2018-11-23 12:54:02,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:02,856 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:02,856 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:54:02,856 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:54:02,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 59 states. [2018-11-23 12:54:02,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 66 transitions. [2018-11-23 12:54:02,859 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 66 transitions. Word has length 45 [2018-11-23 12:54:02,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:54:02,860 INFO L480 AbstractCegarLoop]: Abstraction has 59 states and 66 transitions. [2018-11-23 12:54:02,860 INFO L481 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-11-23 12:54:02,860 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 66 transitions. [2018-11-23 12:54:02,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 12:54:02,861 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:54:02,861 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:54:02,861 INFO L423 AbstractCegarLoop]: === Iteration 6 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:54:02,862 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:54:02,862 INFO L82 PathProgramCache]: Analyzing trace with hash 681136710, now seen corresponding path program 1 times [2018-11-23 12:54:02,862 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:54:02,862 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:54:02,864 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:02,864 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:02,864 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:02,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:03,221 INFO L256 TraceCheckUtils]: 0: Hoare triple {2192#true} call ULTIMATE.init(); {2192#true} is VALID [2018-11-23 12:54:03,223 INFO L273 TraceCheckUtils]: 1: Hoare triple {2192#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {2194#(= 0 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,223 INFO L273 TraceCheckUtils]: 2: Hoare triple {2194#(= 0 ~guard_malloc_counter~0.offset)} assume true; {2194#(= 0 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,224 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2194#(= 0 ~guard_malloc_counter~0.offset)} {2192#true} #73#return; {2194#(= 0 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,224 INFO L256 TraceCheckUtils]: 4: Hoare triple {2194#(= 0 ~guard_malloc_counter~0.offset)} call #t~ret34 := main(); {2194#(= 0 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,225 INFO L273 TraceCheckUtils]: 5: Hoare triple {2194#(= 0 ~guard_malloc_counter~0.offset)} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {2194#(= 0 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,226 INFO L256 TraceCheckUtils]: 6: Hoare triple {2194#(= 0 ~guard_malloc_counter~0.offset)} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,226 INFO L273 TraceCheckUtils]: 7: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,227 INFO L256 TraceCheckUtils]: 8: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2196#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,228 INFO L273 TraceCheckUtils]: 9: Hoare triple {2196#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} ~size := #in~size; {2196#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,228 INFO L273 TraceCheckUtils]: 10: Hoare triple {2196#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} assume ~size > 0; {2196#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,229 INFO L273 TraceCheckUtils]: 11: Hoare triple {2196#(or (= ~guard_malloc_counter~0.offset 0) (= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset))} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,230 INFO L273 TraceCheckUtils]: 12: Hoare triple {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,231 INFO L273 TraceCheckUtils]: 13: Hoare triple {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} assume true; {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,232 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,233 INFO L273 TraceCheckUtils]: 15: Hoare triple {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,233 INFO L273 TraceCheckUtils]: 16: Hoare triple {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} assume true; {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:03,234 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {2197#(or (not (= |old(~guard_malloc_counter~0.offset)| 0)) (<= 1 ~guard_malloc_counter~0.offset))} {2194#(= 0 ~guard_malloc_counter~0.offset)} #77#return; {2198#(<= 1 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,235 INFO L273 TraceCheckUtils]: 18: Hoare triple {2198#(<= 1 ~guard_malloc_counter~0.offset)} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {2198#(<= 1 ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,236 INFO L256 TraceCheckUtils]: 19: Hoare triple {2198#(<= 1 ~guard_malloc_counter~0.offset)} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,236 INFO L273 TraceCheckUtils]: 20: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,237 INFO L256 TraceCheckUtils]: 21: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,238 INFO L273 TraceCheckUtils]: 22: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,238 INFO L273 TraceCheckUtils]: 23: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} assume ~size > 0; {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,239 INFO L273 TraceCheckUtils]: 24: Hoare triple {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2199#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,240 INFO L273 TraceCheckUtils]: 25: Hoare triple {2199#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2200#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} is VALID [2018-11-23 12:54:03,240 INFO L273 TraceCheckUtils]: 26: Hoare triple {2200#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} assume true; {2200#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} is VALID [2018-11-23 12:54:03,241 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {2200#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} {2195#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {2201#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#t~ret30.offset|)} is VALID [2018-11-23 12:54:03,242 INFO L273 TraceCheckUtils]: 28: Hoare triple {2201#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#t~ret30.offset|)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2202#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} is VALID [2018-11-23 12:54:03,243 INFO L273 TraceCheckUtils]: 29: Hoare triple {2202#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} assume true; {2202#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} is VALID [2018-11-23 12:54:03,244 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {2202#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} {2198#(<= 1 ~guard_malloc_counter~0.offset)} #79#return; {2203#(<= 2 |main_#t~ret33.offset|)} is VALID [2018-11-23 12:54:03,245 INFO L273 TraceCheckUtils]: 31: Hoare triple {2203#(<= 2 |main_#t~ret33.offset|)} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {2204#(<= 2 main_~dev2~0.offset)} is VALID [2018-11-23 12:54:03,245 INFO L273 TraceCheckUtils]: 32: Hoare triple {2204#(<= 2 main_~dev2~0.offset)} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {2204#(<= 2 main_~dev2~0.offset)} is VALID [2018-11-23 12:54:03,246 INFO L256 TraceCheckUtils]: 33: Hoare triple {2204#(<= 2 main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2192#true} is VALID [2018-11-23 12:54:03,246 INFO L273 TraceCheckUtils]: 34: Hoare triple {2192#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2192#true} is VALID [2018-11-23 12:54:03,246 INFO L273 TraceCheckUtils]: 35: Hoare triple {2192#true} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2192#true} is VALID [2018-11-23 12:54:03,246 INFO L273 TraceCheckUtils]: 36: Hoare triple {2192#true} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2192#true} is VALID [2018-11-23 12:54:03,247 INFO L273 TraceCheckUtils]: 37: Hoare triple {2192#true} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2192#true} is VALID [2018-11-23 12:54:03,247 INFO L273 TraceCheckUtils]: 38: Hoare triple {2192#true} assume true; {2192#true} is VALID [2018-11-23 12:54:03,248 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {2192#true} {2204#(<= 2 main_~dev2~0.offset)} #81#return; {2204#(<= 2 main_~dev2~0.offset)} is VALID [2018-11-23 12:54:03,248 INFO L256 TraceCheckUtils]: 40: Hoare triple {2204#(<= 2 main_~dev2~0.offset)} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {2192#true} is VALID [2018-11-23 12:54:03,248 INFO L273 TraceCheckUtils]: 41: Hoare triple {2192#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2192#true} is VALID [2018-11-23 12:54:03,248 INFO L273 TraceCheckUtils]: 42: Hoare triple {2192#true} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2192#true} is VALID [2018-11-23 12:54:03,249 INFO L273 TraceCheckUtils]: 43: Hoare triple {2192#true} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2192#true} is VALID [2018-11-23 12:54:03,249 INFO L273 TraceCheckUtils]: 44: Hoare triple {2192#true} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2192#true} is VALID [2018-11-23 12:54:03,249 INFO L273 TraceCheckUtils]: 45: Hoare triple {2192#true} assume true; {2192#true} is VALID [2018-11-23 12:54:03,250 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {2192#true} {2204#(<= 2 main_~dev2~0.offset)} #83#return; {2204#(<= 2 main_~dev2~0.offset)} is VALID [2018-11-23 12:54:03,250 INFO L256 TraceCheckUtils]: 47: Hoare triple {2204#(<= 2 main_~dev2~0.offset)} call list_del(~dev2~0.base, ~dev2~0.offset); {2192#true} is VALID [2018-11-23 12:54:03,250 INFO L273 TraceCheckUtils]: 48: Hoare triple {2192#true} ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; {2192#true} is VALID [2018-11-23 12:54:03,250 INFO L273 TraceCheckUtils]: 49: Hoare triple {2192#true} assume ~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset;~elem~0.base, ~elem~0.offset := 0, 0; {2205#(= 0 ~elem~0.offset)} is VALID [2018-11-23 12:54:03,251 INFO L273 TraceCheckUtils]: 50: Hoare triple {2205#(= 0 ~elem~0.offset)} assume true; {2205#(= 0 ~elem~0.offset)} is VALID [2018-11-23 12:54:03,252 INFO L268 TraceCheckUtils]: 51: Hoare quadruple {2205#(= 0 ~elem~0.offset)} {2204#(<= 2 main_~dev2~0.offset)} #85#return; {2206#(and (<= 2 main_~dev2~0.offset) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:54:03,260 INFO L256 TraceCheckUtils]: 52: Hoare triple {2206#(and (<= 2 main_~dev2~0.offset) (= 0 ~elem~0.offset))} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2207#(and (<= 2 |list_add_#in~new.offset|) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:54:03,260 INFO L273 TraceCheckUtils]: 53: Hoare triple {2207#(and (<= 2 |list_add_#in~new.offset|) (= 0 ~elem~0.offset))} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2208#(and (not (= list_add_~new.offset 0)) (= 0 ~elem~0.offset))} is VALID [2018-11-23 12:54:03,261 INFO L273 TraceCheckUtils]: 54: Hoare triple {2208#(and (not (= list_add_~new.offset 0)) (= 0 ~elem~0.offset))} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {2193#false} is VALID [2018-11-23 12:54:03,261 INFO L256 TraceCheckUtils]: 55: Hoare triple {2193#false} call __blast_assert(); {2193#false} is VALID [2018-11-23 12:54:03,261 INFO L273 TraceCheckUtils]: 56: Hoare triple {2193#false} assume !false; {2193#false} is VALID [2018-11-23 12:54:03,265 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:54:03,265 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 12:54:03,265 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 12:54:03,274 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:03,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:03,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:03,354 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 12:54:03,988 INFO L256 TraceCheckUtils]: 0: Hoare triple {2192#true} call ULTIMATE.init(); {2192#true} is VALID [2018-11-23 12:54:03,988 INFO L273 TraceCheckUtils]: 1: Hoare triple {2192#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {2192#true} is VALID [2018-11-23 12:54:03,988 INFO L273 TraceCheckUtils]: 2: Hoare triple {2192#true} assume true; {2192#true} is VALID [2018-11-23 12:54:03,988 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2192#true} {2192#true} #73#return; {2192#true} is VALID [2018-11-23 12:54:03,988 INFO L256 TraceCheckUtils]: 4: Hoare triple {2192#true} call #t~ret34 := main(); {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L273 TraceCheckUtils]: 5: Hoare triple {2192#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L256 TraceCheckUtils]: 6: Hoare triple {2192#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L273 TraceCheckUtils]: 7: Hoare triple {2192#true} ~size := #in~size; {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L256 TraceCheckUtils]: 8: Hoare triple {2192#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L273 TraceCheckUtils]: 9: Hoare triple {2192#true} ~size := #in~size; {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L273 TraceCheckUtils]: 10: Hoare triple {2192#true} assume ~size > 0; {2192#true} is VALID [2018-11-23 12:54:03,989 INFO L273 TraceCheckUtils]: 11: Hoare triple {2192#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2192#true} is VALID [2018-11-23 12:54:03,990 INFO L273 TraceCheckUtils]: 12: Hoare triple {2192#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2248#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,992 INFO L273 TraceCheckUtils]: 13: Hoare triple {2248#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {2248#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,993 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {2248#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} {2192#true} #69#return; {2255#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,993 INFO L273 TraceCheckUtils]: 15: Hoare triple {2255#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2259#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,994 INFO L273 TraceCheckUtils]: 16: Hoare triple {2259#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {2259#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,995 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {2259#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} {2192#true} #77#return; {2266#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,997 INFO L273 TraceCheckUtils]: 18: Hoare triple {2266#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {2270#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:03,997 INFO L256 TraceCheckUtils]: 19: Hoare triple {2270#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:04,006 INFO L273 TraceCheckUtils]: 20: Hoare triple {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:04,026 INFO L256 TraceCheckUtils]: 21: Hoare triple {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:04,035 INFO L273 TraceCheckUtils]: 22: Hoare triple {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:04,050 INFO L273 TraceCheckUtils]: 23: Hoare triple {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} assume ~size > 0; {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:04,059 INFO L273 TraceCheckUtils]: 24: Hoare triple {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2199#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:04,075 INFO L273 TraceCheckUtils]: 25: Hoare triple {2199#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2293#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} is VALID [2018-11-23 12:54:04,084 INFO L273 TraceCheckUtils]: 26: Hoare triple {2293#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} assume true; {2293#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} is VALID [2018-11-23 12:54:04,098 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {2293#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} {2274#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {2300#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|))} is VALID [2018-11-23 12:54:04,111 INFO L273 TraceCheckUtils]: 28: Hoare triple {2300#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2304#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:04,120 INFO L273 TraceCheckUtils]: 29: Hoare triple {2304#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} assume true; {2304#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:04,138 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {2304#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} {2270#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} #79#return; {2311#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} is VALID [2018-11-23 12:54:04,147 INFO L273 TraceCheckUtils]: 31: Hoare triple {2311#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:04,160 INFO L273 TraceCheckUtils]: 32: Hoare triple {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:04,160 INFO L256 TraceCheckUtils]: 33: Hoare triple {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2192#true} is VALID [2018-11-23 12:54:04,160 INFO L273 TraceCheckUtils]: 34: Hoare triple {2192#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2192#true} is VALID [2018-11-23 12:54:04,160 INFO L273 TraceCheckUtils]: 35: Hoare triple {2192#true} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2192#true} is VALID [2018-11-23 12:54:04,161 INFO L273 TraceCheckUtils]: 36: Hoare triple {2192#true} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2192#true} is VALID [2018-11-23 12:54:04,161 INFO L273 TraceCheckUtils]: 37: Hoare triple {2192#true} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2192#true} is VALID [2018-11-23 12:54:04,161 INFO L273 TraceCheckUtils]: 38: Hoare triple {2192#true} assume true; {2192#true} is VALID [2018-11-23 12:54:04,174 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {2192#true} {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #81#return; {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:04,174 INFO L256 TraceCheckUtils]: 40: Hoare triple {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {2192#true} is VALID [2018-11-23 12:54:04,189 INFO L273 TraceCheckUtils]: 41: Hoare triple {2192#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2346#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:04,204 INFO L273 TraceCheckUtils]: 42: Hoare triple {2346#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2346#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:04,213 INFO L273 TraceCheckUtils]: 43: Hoare triple {2346#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2346#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:04,225 INFO L273 TraceCheckUtils]: 44: Hoare triple {2346#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2356#(<= ~elem~0.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:04,238 INFO L273 TraceCheckUtils]: 45: Hoare triple {2356#(<= ~elem~0.offset |list_add_#in~new.offset|)} assume true; {2356#(<= ~elem~0.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:04,251 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {2356#(<= ~elem~0.offset |list_add_#in~new.offset|)} {2315#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #83#return; {2363#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:04,267 INFO L256 TraceCheckUtils]: 47: Hoare triple {2363#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} call list_del(~dev2~0.base, ~dev2~0.offset); {2367#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:04,277 INFO L273 TraceCheckUtils]: 48: Hoare triple {2367#(<= ~elem~0.offset |old(~elem~0.offset)|)} ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; {2371#(and (<= ~elem~0.offset |old(~elem~0.offset)|) (<= |list_del_#in~entry.offset| list_del_~entry.offset))} is VALID [2018-11-23 12:54:04,290 INFO L273 TraceCheckUtils]: 49: Hoare triple {2371#(and (<= ~elem~0.offset |old(~elem~0.offset)|) (<= |list_del_#in~entry.offset| list_del_~entry.offset))} assume ~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset;~elem~0.base, ~elem~0.offset := 0, 0; {2375#(<= |list_del_#in~entry.offset| |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:04,302 INFO L273 TraceCheckUtils]: 50: Hoare triple {2375#(<= |list_del_#in~entry.offset| |old(~elem~0.offset)|)} assume true; {2375#(<= |list_del_#in~entry.offset| |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:04,315 INFO L268 TraceCheckUtils]: 51: Hoare quadruple {2375#(<= |list_del_#in~entry.offset| |old(~elem~0.offset)|)} {2363#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} #85#return; {2193#false} is VALID [2018-11-23 12:54:04,316 INFO L256 TraceCheckUtils]: 52: Hoare triple {2193#false} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2193#false} is VALID [2018-11-23 12:54:04,316 INFO L273 TraceCheckUtils]: 53: Hoare triple {2193#false} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2193#false} is VALID [2018-11-23 12:54:04,316 INFO L273 TraceCheckUtils]: 54: Hoare triple {2193#false} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {2193#false} is VALID [2018-11-23 12:54:04,316 INFO L256 TraceCheckUtils]: 55: Hoare triple {2193#false} call __blast_assert(); {2193#false} is VALID [2018-11-23 12:54:04,317 INFO L273 TraceCheckUtils]: 56: Hoare triple {2193#false} assume !false; {2193#false} is VALID [2018-11-23 12:54:04,320 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 12:54:04,346 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 12:54:04,346 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 20] total 34 [2018-11-23 12:54:04,347 INFO L78 Accepts]: Start accepts. Automaton has 34 states. Word has length 57 [2018-11-23 12:54:04,347 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:54:04,347 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 34 states. [2018-11-23 12:54:04,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:04,454 INFO L459 AbstractCegarLoop]: Interpolant automaton has 34 states [2018-11-23 12:54:04,454 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2018-11-23 12:54:04,455 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=90, Invalid=1032, Unknown=0, NotChecked=0, Total=1122 [2018-11-23 12:54:04,455 INFO L87 Difference]: Start difference. First operand 59 states and 66 transitions. Second operand 34 states. [2018-11-23 12:54:11,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:11,440 INFO L93 Difference]: Finished difference Result 105 states and 119 transitions. [2018-11-23 12:54:11,440 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2018-11-23 12:54:11,440 INFO L78 Accepts]: Start accepts. Automaton has 34 states. Word has length 57 [2018-11-23 12:54:11,440 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:54:11,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 34 states. [2018-11-23 12:54:11,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 102 transitions. [2018-11-23 12:54:11,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 34 states. [2018-11-23 12:54:11,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 102 transitions. [2018-11-23 12:54:11,449 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 28 states and 102 transitions. [2018-11-23 12:54:11,615 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:11,619 INFO L225 Difference]: With dead ends: 105 [2018-11-23 12:54:11,620 INFO L226 Difference]: Without dead ends: 88 [2018-11-23 12:54:11,621 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 52 SyntacticMatches, 1 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 598 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=397, Invalid=3143, Unknown=0, NotChecked=0, Total=3540 [2018-11-23 12:54:11,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2018-11-23 12:54:11,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 72. [2018-11-23 12:54:11,840 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:54:11,841 INFO L82 GeneralOperation]: Start isEquivalent. First operand 88 states. Second operand 72 states. [2018-11-23 12:54:11,841 INFO L74 IsIncluded]: Start isIncluded. First operand 88 states. Second operand 72 states. [2018-11-23 12:54:11,841 INFO L87 Difference]: Start difference. First operand 88 states. Second operand 72 states. [2018-11-23 12:54:11,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:11,846 INFO L93 Difference]: Finished difference Result 88 states and 99 transitions. [2018-11-23 12:54:11,846 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 99 transitions. [2018-11-23 12:54:11,847 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:11,847 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:11,847 INFO L74 IsIncluded]: Start isIncluded. First operand 72 states. Second operand 88 states. [2018-11-23 12:54:11,848 INFO L87 Difference]: Start difference. First operand 72 states. Second operand 88 states. [2018-11-23 12:54:11,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:11,852 INFO L93 Difference]: Finished difference Result 88 states and 99 transitions. [2018-11-23 12:54:11,852 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 99 transitions. [2018-11-23 12:54:11,853 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:11,853 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:11,853 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:54:11,853 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:54:11,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 72 states. [2018-11-23 12:54:11,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 81 transitions. [2018-11-23 12:54:11,857 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 81 transitions. Word has length 57 [2018-11-23 12:54:11,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:54:11,857 INFO L480 AbstractCegarLoop]: Abstraction has 72 states and 81 transitions. [2018-11-23 12:54:11,857 INFO L481 AbstractCegarLoop]: Interpolant automaton has 34 states. [2018-11-23 12:54:11,857 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 81 transitions. [2018-11-23 12:54:11,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 12:54:11,858 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:54:11,859 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:54:11,859 INFO L423 AbstractCegarLoop]: === Iteration 7 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:54:11,859 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:54:11,859 INFO L82 PathProgramCache]: Analyzing trace with hash -128209916, now seen corresponding path program 1 times [2018-11-23 12:54:11,859 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:54:11,859 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:54:11,861 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:11,861 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:11,861 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:11,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:12,304 INFO L256 TraceCheckUtils]: 0: Hoare triple {2876#true} call ULTIMATE.init(); {2876#true} is VALID [2018-11-23 12:54:12,304 INFO L273 TraceCheckUtils]: 1: Hoare triple {2876#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {2876#true} is VALID [2018-11-23 12:54:12,305 INFO L273 TraceCheckUtils]: 2: Hoare triple {2876#true} assume true; {2876#true} is VALID [2018-11-23 12:54:12,305 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2876#true} {2876#true} #73#return; {2876#true} is VALID [2018-11-23 12:54:12,305 INFO L256 TraceCheckUtils]: 4: Hoare triple {2876#true} call #t~ret34 := main(); {2876#true} is VALID [2018-11-23 12:54:12,305 INFO L273 TraceCheckUtils]: 5: Hoare triple {2876#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {2876#true} is VALID [2018-11-23 12:54:12,306 INFO L256 TraceCheckUtils]: 6: Hoare triple {2876#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {2876#true} is VALID [2018-11-23 12:54:12,306 INFO L273 TraceCheckUtils]: 7: Hoare triple {2876#true} ~size := #in~size; {2876#true} is VALID [2018-11-23 12:54:12,306 INFO L256 TraceCheckUtils]: 8: Hoare triple {2876#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2876#true} is VALID [2018-11-23 12:54:12,306 INFO L273 TraceCheckUtils]: 9: Hoare triple {2876#true} ~size := #in~size; {2876#true} is VALID [2018-11-23 12:54:12,307 INFO L273 TraceCheckUtils]: 10: Hoare triple {2876#true} assume ~size > 0; {2876#true} is VALID [2018-11-23 12:54:12,307 INFO L273 TraceCheckUtils]: 11: Hoare triple {2876#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2876#true} is VALID [2018-11-23 12:54:12,308 INFO L273 TraceCheckUtils]: 12: Hoare triple {2876#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,308 INFO L273 TraceCheckUtils]: 13: Hoare triple {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,309 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} {2876#true} #69#return; {2879#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,310 INFO L273 TraceCheckUtils]: 15: Hoare triple {2879#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,310 INFO L273 TraceCheckUtils]: 16: Hoare triple {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,311 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} {2876#true} #77#return; {2881#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,311 INFO L273 TraceCheckUtils]: 18: Hoare triple {2881#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {2882#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,312 INFO L256 TraceCheckUtils]: 19: Hoare triple {2882#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,313 INFO L273 TraceCheckUtils]: 20: Hoare triple {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,314 INFO L256 TraceCheckUtils]: 21: Hoare triple {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,314 INFO L273 TraceCheckUtils]: 22: Hoare triple {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,315 INFO L273 TraceCheckUtils]: 23: Hoare triple {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} assume ~size > 0; {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,316 INFO L273 TraceCheckUtils]: 24: Hoare triple {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2884#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,316 INFO L273 TraceCheckUtils]: 25: Hoare triple {2884#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2885#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} is VALID [2018-11-23 12:54:12,317 INFO L273 TraceCheckUtils]: 26: Hoare triple {2885#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} assume true; {2885#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} is VALID [2018-11-23 12:54:12,318 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {2885#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |__getMemory_#res.offset|)} {2883#(= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {2886#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#t~ret30.offset|)} is VALID [2018-11-23 12:54:12,319 INFO L273 TraceCheckUtils]: 28: Hoare triple {2886#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#t~ret30.offset|)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2887#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} is VALID [2018-11-23 12:54:12,320 INFO L273 TraceCheckUtils]: 29: Hoare triple {2887#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} assume true; {2887#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} is VALID [2018-11-23 12:54:12,321 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {2887#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) |my_malloc_#res.offset|)} {2882#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} #79#return; {2888#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} is VALID [2018-11-23 12:54:12,322 INFO L273 TraceCheckUtils]: 31: Hoare triple {2888#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,323 INFO L273 TraceCheckUtils]: 32: Hoare triple {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,323 INFO L256 TraceCheckUtils]: 33: Hoare triple {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2876#true} is VALID [2018-11-23 12:54:12,323 INFO L273 TraceCheckUtils]: 34: Hoare triple {2876#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2876#true} is VALID [2018-11-23 12:54:12,323 INFO L273 TraceCheckUtils]: 35: Hoare triple {2876#true} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2876#true} is VALID [2018-11-23 12:54:12,323 INFO L273 TraceCheckUtils]: 36: Hoare triple {2876#true} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2876#true} is VALID [2018-11-23 12:54:12,324 INFO L273 TraceCheckUtils]: 37: Hoare triple {2876#true} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2876#true} is VALID [2018-11-23 12:54:12,324 INFO L273 TraceCheckUtils]: 38: Hoare triple {2876#true} assume true; {2876#true} is VALID [2018-11-23 12:54:12,325 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {2876#true} {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #81#return; {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,325 INFO L256 TraceCheckUtils]: 40: Hoare triple {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {2876#true} is VALID [2018-11-23 12:54:12,325 INFO L273 TraceCheckUtils]: 41: Hoare triple {2876#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,326 INFO L273 TraceCheckUtils]: 42: Hoare triple {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,326 INFO L273 TraceCheckUtils]: 43: Hoare triple {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,326 INFO L273 TraceCheckUtils]: 44: Hoare triple {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,327 INFO L273 TraceCheckUtils]: 45: Hoare triple {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} assume true; {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,328 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #83#return; {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,329 INFO L256 TraceCheckUtils]: 47: Hoare triple {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} call list_del(~dev2~0.base, ~dev2~0.offset); {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:54:12,330 INFO L273 TraceCheckUtils]: 48: Hoare triple {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:54:12,331 INFO L273 TraceCheckUtils]: 49: Hoare triple {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:54:12,331 INFO L273 TraceCheckUtils]: 50: Hoare triple {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} assume true; {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} is VALID [2018-11-23 12:54:12,333 INFO L268 TraceCheckUtils]: 51: Hoare quadruple {2893#(= |old(~elem~0.offset)| ~elem~0.offset)} {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} #85#return; {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,335 INFO L256 TraceCheckUtils]: 52: Hoare triple {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2894#(<= (+ ~elem~0.offset 1) |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,336 INFO L273 TraceCheckUtils]: 53: Hoare triple {2894#(<= (+ ~elem~0.offset 1) |list_add_#in~new.offset|)} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2895#(not (= list_add_~new.offset ~elem~0.offset))} is VALID [2018-11-23 12:54:12,336 INFO L273 TraceCheckUtils]: 54: Hoare triple {2895#(not (= list_add_~new.offset ~elem~0.offset))} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {2877#false} is VALID [2018-11-23 12:54:12,336 INFO L256 TraceCheckUtils]: 55: Hoare triple {2877#false} call __blast_assert(); {2877#false} is VALID [2018-11-23 12:54:12,337 INFO L273 TraceCheckUtils]: 56: Hoare triple {2877#false} assume !false; {2877#false} is VALID [2018-11-23 12:54:12,340 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 12:54:12,340 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 12:54:12,340 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 12:54:12,350 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:12,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:12,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:12,427 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 12:54:12,847 INFO L256 TraceCheckUtils]: 0: Hoare triple {2876#true} call ULTIMATE.init(); {2876#true} is VALID [2018-11-23 12:54:12,848 INFO L273 TraceCheckUtils]: 1: Hoare triple {2876#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {2876#true} is VALID [2018-11-23 12:54:12,848 INFO L273 TraceCheckUtils]: 2: Hoare triple {2876#true} assume true; {2876#true} is VALID [2018-11-23 12:54:12,848 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2876#true} {2876#true} #73#return; {2876#true} is VALID [2018-11-23 12:54:12,848 INFO L256 TraceCheckUtils]: 4: Hoare triple {2876#true} call #t~ret34 := main(); {2876#true} is VALID [2018-11-23 12:54:12,849 INFO L273 TraceCheckUtils]: 5: Hoare triple {2876#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {2876#true} is VALID [2018-11-23 12:54:12,849 INFO L256 TraceCheckUtils]: 6: Hoare triple {2876#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {2876#true} is VALID [2018-11-23 12:54:12,849 INFO L273 TraceCheckUtils]: 7: Hoare triple {2876#true} ~size := #in~size; {2876#true} is VALID [2018-11-23 12:54:12,849 INFO L256 TraceCheckUtils]: 8: Hoare triple {2876#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2876#true} is VALID [2018-11-23 12:54:12,849 INFO L273 TraceCheckUtils]: 9: Hoare triple {2876#true} ~size := #in~size; {2876#true} is VALID [2018-11-23 12:54:12,849 INFO L273 TraceCheckUtils]: 10: Hoare triple {2876#true} assume ~size > 0; {2876#true} is VALID [2018-11-23 12:54:12,850 INFO L273 TraceCheckUtils]: 11: Hoare triple {2876#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2876#true} is VALID [2018-11-23 12:54:12,850 INFO L273 TraceCheckUtils]: 12: Hoare triple {2876#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,851 INFO L273 TraceCheckUtils]: 13: Hoare triple {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,851 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {2878#(<= |__getMemory_#res.offset| ~guard_malloc_counter~0.offset)} {2876#true} #69#return; {2879#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,852 INFO L273 TraceCheckUtils]: 15: Hoare triple {2879#(<= |my_malloc_#t~ret30.offset| ~guard_malloc_counter~0.offset)} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,852 INFO L273 TraceCheckUtils]: 16: Hoare triple {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} assume true; {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,853 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {2880#(<= |my_malloc_#res.offset| ~guard_malloc_counter~0.offset)} {2876#true} #77#return; {2881#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,853 INFO L273 TraceCheckUtils]: 18: Hoare triple {2881#(<= |main_#t~ret32.offset| ~guard_malloc_counter~0.offset)} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {2882#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,854 INFO L256 TraceCheckUtils]: 19: Hoare triple {2882#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,854 INFO L273 TraceCheckUtils]: 20: Hoare triple {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,855 INFO L256 TraceCheckUtils]: 21: Hoare triple {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,855 INFO L273 TraceCheckUtils]: 22: Hoare triple {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} ~size := #in~size; {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,855 INFO L273 TraceCheckUtils]: 23: Hoare triple {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} assume ~size > 0; {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,857 INFO L273 TraceCheckUtils]: 24: Hoare triple {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {2884#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} is VALID [2018-11-23 12:54:12,857 INFO L273 TraceCheckUtils]: 25: Hoare triple {2884#(<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset)} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {2975#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} is VALID [2018-11-23 12:54:12,858 INFO L273 TraceCheckUtils]: 26: Hoare triple {2975#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} assume true; {2975#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} is VALID [2018-11-23 12:54:12,860 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {2975#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |__getMemory_#res.offset|))} {2956#(<= |old(~guard_malloc_counter~0.offset)| ~guard_malloc_counter~0.offset)} #69#return; {2982#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|))} is VALID [2018-11-23 12:54:12,861 INFO L273 TraceCheckUtils]: 28: Hoare triple {2982#(and (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset) (<= ~guard_malloc_counter~0.offset |my_malloc_#t~ret30.offset|))} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {2986#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:12,870 INFO L273 TraceCheckUtils]: 29: Hoare triple {2986#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} assume true; {2986#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} is VALID [2018-11-23 12:54:12,883 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {2986#(and (<= ~guard_malloc_counter~0.offset |my_malloc_#res.offset|) (<= (+ |old(~guard_malloc_counter~0.offset)| 1) ~guard_malloc_counter~0.offset))} {2882#(<= main_~dev1~0.offset ~guard_malloc_counter~0.offset)} #79#return; {2888#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} is VALID [2018-11-23 12:54:12,896 INFO L273 TraceCheckUtils]: 31: Hoare triple {2888#(<= (+ main_~dev1~0.offset 1) |main_#t~ret33.offset|)} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,909 INFO L273 TraceCheckUtils]: 32: Hoare triple {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,909 INFO L256 TraceCheckUtils]: 33: Hoare triple {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2876#true} is VALID [2018-11-23 12:54:12,910 INFO L273 TraceCheckUtils]: 34: Hoare triple {2876#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2876#true} is VALID [2018-11-23 12:54:12,910 INFO L273 TraceCheckUtils]: 35: Hoare triple {2876#true} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2876#true} is VALID [2018-11-23 12:54:12,910 INFO L273 TraceCheckUtils]: 36: Hoare triple {2876#true} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2876#true} is VALID [2018-11-23 12:54:12,910 INFO L273 TraceCheckUtils]: 37: Hoare triple {2876#true} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2876#true} is VALID [2018-11-23 12:54:12,910 INFO L273 TraceCheckUtils]: 38: Hoare triple {2876#true} assume true; {2876#true} is VALID [2018-11-23 12:54:12,923 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {2876#true} {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #81#return; {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,924 INFO L256 TraceCheckUtils]: 40: Hoare triple {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {2876#true} is VALID [2018-11-23 12:54:12,930 INFO L273 TraceCheckUtils]: 41: Hoare triple {2876#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,930 INFO L273 TraceCheckUtils]: 42: Hoare triple {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,932 INFO L273 TraceCheckUtils]: 43: Hoare triple {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,932 INFO L273 TraceCheckUtils]: 44: Hoare triple {2890#(<= list_add_~new.offset |list_add_#in~new.offset|)} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,932 INFO L273 TraceCheckUtils]: 45: Hoare triple {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} assume true; {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,935 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {2891#(<= ~elem~0.offset |list_add_#in~new.offset|)} {2889#(<= (+ main_~dev1~0.offset 1) main_~dev2~0.offset)} #83#return; {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,937 INFO L256 TraceCheckUtils]: 47: Hoare triple {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} call list_del(~dev2~0.base, ~dev2~0.offset); {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:12,941 INFO L273 TraceCheckUtils]: 48: Hoare triple {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:12,942 INFO L273 TraceCheckUtils]: 49: Hoare triple {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:12,942 INFO L273 TraceCheckUtils]: 50: Hoare triple {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} assume true; {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} is VALID [2018-11-23 12:54:12,943 INFO L268 TraceCheckUtils]: 51: Hoare quadruple {3044#(<= ~elem~0.offset |old(~elem~0.offset)|)} {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} #85#return; {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} is VALID [2018-11-23 12:54:12,945 INFO L256 TraceCheckUtils]: 52: Hoare triple {2892#(<= (+ ~elem~0.offset 1) main_~dev2~0.offset)} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {2894#(<= (+ ~elem~0.offset 1) |list_add_#in~new.offset|)} is VALID [2018-11-23 12:54:12,945 INFO L273 TraceCheckUtils]: 53: Hoare triple {2894#(<= (+ ~elem~0.offset 1) |list_add_#in~new.offset|)} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3063#(<= (+ ~elem~0.offset 1) list_add_~new.offset)} is VALID [2018-11-23 12:54:12,946 INFO L273 TraceCheckUtils]: 54: Hoare triple {3063#(<= (+ ~elem~0.offset 1) list_add_~new.offset)} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {2877#false} is VALID [2018-11-23 12:54:12,946 INFO L256 TraceCheckUtils]: 55: Hoare triple {2877#false} call __blast_assert(); {2877#false} is VALID [2018-11-23 12:54:12,947 INFO L273 TraceCheckUtils]: 56: Hoare triple {2877#false} assume !false; {2877#false} is VALID [2018-11-23 12:54:12,950 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 12:54:12,970 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 12:54:12,970 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20] total 26 [2018-11-23 12:54:12,971 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 57 [2018-11-23 12:54:12,971 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:54:12,971 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 26 states. [2018-11-23 12:54:13,053 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:13,053 INFO L459 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-11-23 12:54:13,053 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-11-23 12:54:13,054 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=587, Unknown=0, NotChecked=0, Total=650 [2018-11-23 12:54:13,054 INFO L87 Difference]: Start difference. First operand 72 states and 81 transitions. Second operand 26 states. [2018-11-23 12:54:15,887 WARN L180 SmtUtils]: Spent 101.00 ms on a formula simplification that was a NOOP. DAG size: 11 [2018-11-23 12:54:21,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:21,897 INFO L93 Difference]: Finished difference Result 83 states and 93 transitions. [2018-11-23 12:54:21,898 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-11-23 12:54:21,898 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 57 [2018-11-23 12:54:21,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:54:21,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2018-11-23 12:54:21,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 66 transitions. [2018-11-23 12:54:21,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2018-11-23 12:54:21,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 66 transitions. [2018-11-23 12:54:21,903 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 19 states and 66 transitions. [2018-11-23 12:54:22,005 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:22,009 INFO L225 Difference]: With dead ends: 83 [2018-11-23 12:54:22,009 INFO L226 Difference]: Without dead ends: 80 [2018-11-23 12:54:22,010 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 197 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=206, Invalid=1516, Unknown=0, NotChecked=0, Total=1722 [2018-11-23 12:54:22,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2018-11-23 12:54:22,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 79. [2018-11-23 12:54:22,146 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:54:22,146 INFO L82 GeneralOperation]: Start isEquivalent. First operand 80 states. Second operand 79 states. [2018-11-23 12:54:22,146 INFO L74 IsIncluded]: Start isIncluded. First operand 80 states. Second operand 79 states. [2018-11-23 12:54:22,146 INFO L87 Difference]: Start difference. First operand 80 states. Second operand 79 states. [2018-11-23 12:54:22,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:22,150 INFO L93 Difference]: Finished difference Result 80 states and 90 transitions. [2018-11-23 12:54:22,150 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 90 transitions. [2018-11-23 12:54:22,151 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:22,151 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:22,151 INFO L74 IsIncluded]: Start isIncluded. First operand 79 states. Second operand 80 states. [2018-11-23 12:54:22,151 INFO L87 Difference]: Start difference. First operand 79 states. Second operand 80 states. [2018-11-23 12:54:22,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:22,154 INFO L93 Difference]: Finished difference Result 80 states and 90 transitions. [2018-11-23 12:54:22,154 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 90 transitions. [2018-11-23 12:54:22,155 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:22,155 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:22,155 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:54:22,155 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:54:22,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 79 states. [2018-11-23 12:54:22,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 89 transitions. [2018-11-23 12:54:22,159 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 89 transitions. Word has length 57 [2018-11-23 12:54:22,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:54:22,159 INFO L480 AbstractCegarLoop]: Abstraction has 79 states and 89 transitions. [2018-11-23 12:54:22,159 INFO L481 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-11-23 12:54:22,159 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 89 transitions. [2018-11-23 12:54:22,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 12:54:22,160 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:54:22,160 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:54:22,161 INFO L423 AbstractCegarLoop]: === Iteration 8 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:54:22,161 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:54:22,161 INFO L82 PathProgramCache]: Analyzing trace with hash -715015930, now seen corresponding path program 1 times [2018-11-23 12:54:22,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:54:22,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:54:22,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:22,163 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:22,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:22,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:22,461 INFO L256 TraceCheckUtils]: 0: Hoare triple {3490#true} call ULTIMATE.init(); {3490#true} is VALID [2018-11-23 12:54:22,461 INFO L273 TraceCheckUtils]: 1: Hoare triple {3490#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {3490#true} is VALID [2018-11-23 12:54:22,461 INFO L273 TraceCheckUtils]: 2: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,462 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3490#true} {3490#true} #73#return; {3490#true} is VALID [2018-11-23 12:54:22,462 INFO L256 TraceCheckUtils]: 4: Hoare triple {3490#true} call #t~ret34 := main(); {3490#true} is VALID [2018-11-23 12:54:22,462 INFO L273 TraceCheckUtils]: 5: Hoare triple {3490#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {3490#true} is VALID [2018-11-23 12:54:22,462 INFO L256 TraceCheckUtils]: 6: Hoare triple {3490#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {3490#true} is VALID [2018-11-23 12:54:22,462 INFO L273 TraceCheckUtils]: 7: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,463 INFO L256 TraceCheckUtils]: 8: Hoare triple {3490#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {3490#true} is VALID [2018-11-23 12:54:22,463 INFO L273 TraceCheckUtils]: 9: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,463 INFO L273 TraceCheckUtils]: 10: Hoare triple {3490#true} assume ~size > 0; {3490#true} is VALID [2018-11-23 12:54:22,463 INFO L273 TraceCheckUtils]: 11: Hoare triple {3490#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {3490#true} is VALID [2018-11-23 12:54:22,463 INFO L273 TraceCheckUtils]: 12: Hoare triple {3490#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L273 TraceCheckUtils]: 13: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {3490#true} {3490#true} #69#return; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L273 TraceCheckUtils]: 15: Hoare triple {3490#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L273 TraceCheckUtils]: 16: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {3490#true} {3490#true} #77#return; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L273 TraceCheckUtils]: 18: Hoare triple {3490#true} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L256 TraceCheckUtils]: 19: Hoare triple {3490#true} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {3490#true} is VALID [2018-11-23 12:54:22,464 INFO L273 TraceCheckUtils]: 20: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L256 TraceCheckUtils]: 21: Hoare triple {3490#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L273 TraceCheckUtils]: 22: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L273 TraceCheckUtils]: 23: Hoare triple {3490#true} assume ~size > 0; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L273 TraceCheckUtils]: 24: Hoare triple {3490#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L273 TraceCheckUtils]: 25: Hoare triple {3490#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L273 TraceCheckUtils]: 26: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {3490#true} {3490#true} #69#return; {3490#true} is VALID [2018-11-23 12:54:22,465 INFO L273 TraceCheckUtils]: 28: Hoare triple {3490#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {3490#true} is VALID [2018-11-23 12:54:22,466 INFO L273 TraceCheckUtils]: 29: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,466 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {3490#true} {3490#true} #79#return; {3490#true} is VALID [2018-11-23 12:54:22,466 INFO L273 TraceCheckUtils]: 31: Hoare triple {3490#true} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {3490#true} is VALID [2018-11-23 12:54:22,466 INFO L273 TraceCheckUtils]: 32: Hoare triple {3490#true} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {3490#true} is VALID [2018-11-23 12:54:22,466 INFO L256 TraceCheckUtils]: 33: Hoare triple {3490#true} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {3490#true} is VALID [2018-11-23 12:54:22,467 INFO L273 TraceCheckUtils]: 34: Hoare triple {3490#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} is VALID [2018-11-23 12:54:22,467 INFO L273 TraceCheckUtils]: 35: Hoare triple {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} is VALID [2018-11-23 12:54:22,468 INFO L273 TraceCheckUtils]: 36: Hoare triple {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} is VALID [2018-11-23 12:54:22,468 INFO L273 TraceCheckUtils]: 37: Hoare triple {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} is VALID [2018-11-23 12:54:22,469 INFO L273 TraceCheckUtils]: 38: Hoare triple {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} assume true; {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} is VALID [2018-11-23 12:54:22,470 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} {3490#true} #81#return; {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} is VALID [2018-11-23 12:54:22,472 INFO L256 TraceCheckUtils]: 40: Hoare triple {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,473 INFO L273 TraceCheckUtils]: 41: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,473 INFO L273 TraceCheckUtils]: 42: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,474 INFO L273 TraceCheckUtils]: 43: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,475 INFO L273 TraceCheckUtils]: 44: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume !(0 != #t~nondet31);havoc #t~nondet31; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,475 INFO L273 TraceCheckUtils]: 45: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume true; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,477 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} #83#return; {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} is VALID [2018-11-23 12:54:22,478 INFO L256 TraceCheckUtils]: 47: Hoare triple {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} call list_del(~dev2~0.base, ~dev2~0.offset); {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,479 INFO L273 TraceCheckUtils]: 48: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; {3496#(and (= list_del_~entry.base |list_del_#in~entry.base|) (= ~elem~0.base |old(~elem~0.base)|) (<= list_del_~entry.offset |list_del_#in~entry.offset|) (= ~elem~0.offset |old(~elem~0.offset)|) (<= |list_del_#in~entry.offset| list_del_~entry.offset))} is VALID [2018-11-23 12:54:22,480 INFO L273 TraceCheckUtils]: 49: Hoare triple {3496#(and (= list_del_~entry.base |list_del_#in~entry.base|) (= ~elem~0.base |old(~elem~0.base)|) (<= list_del_~entry.offset |list_del_#in~entry.offset|) (= ~elem~0.offset |old(~elem~0.offset)|) (<= |list_del_#in~entry.offset| list_del_~entry.offset))} assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); {3497#(or (not (= |list_del_#in~entry.offset| |old(~elem~0.offset)|)) (not (= |old(~elem~0.base)| |list_del_#in~entry.base|)))} is VALID [2018-11-23 12:54:22,480 INFO L273 TraceCheckUtils]: 50: Hoare triple {3497#(or (not (= |list_del_#in~entry.offset| |old(~elem~0.offset)|)) (not (= |old(~elem~0.base)| |list_del_#in~entry.base|)))} assume true; {3497#(or (not (= |list_del_#in~entry.offset| |old(~elem~0.offset)|)) (not (= |old(~elem~0.base)| |list_del_#in~entry.base|)))} is VALID [2018-11-23 12:54:22,481 INFO L268 TraceCheckUtils]: 51: Hoare quadruple {3497#(or (not (= |list_del_#in~entry.offset| |old(~elem~0.offset)|)) (not (= |old(~elem~0.base)| |list_del_#in~entry.base|)))} {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} #85#return; {3491#false} is VALID [2018-11-23 12:54:22,481 INFO L256 TraceCheckUtils]: 52: Hoare triple {3491#false} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {3491#false} is VALID [2018-11-23 12:54:22,482 INFO L273 TraceCheckUtils]: 53: Hoare triple {3491#false} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3491#false} is VALID [2018-11-23 12:54:22,482 INFO L273 TraceCheckUtils]: 54: Hoare triple {3491#false} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {3491#false} is VALID [2018-11-23 12:54:22,482 INFO L256 TraceCheckUtils]: 55: Hoare triple {3491#false} call __blast_assert(); {3491#false} is VALID [2018-11-23 12:54:22,482 INFO L273 TraceCheckUtils]: 56: Hoare triple {3491#false} assume !false; {3491#false} is VALID [2018-11-23 12:54:22,488 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:54:22,488 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 12:54:22,489 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 12:54:22,505 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:22,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:22,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:54:22,564 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 12:54:22,752 INFO L256 TraceCheckUtils]: 0: Hoare triple {3490#true} call ULTIMATE.init(); {3490#true} is VALID [2018-11-23 12:54:22,753 INFO L273 TraceCheckUtils]: 1: Hoare triple {3490#true} ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); {3490#true} is VALID [2018-11-23 12:54:22,753 INFO L273 TraceCheckUtils]: 2: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,753 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3490#true} {3490#true} #73#return; {3490#true} is VALID [2018-11-23 12:54:22,753 INFO L256 TraceCheckUtils]: 4: Hoare triple {3490#true} call #t~ret34 := main(); {3490#true} is VALID [2018-11-23 12:54:22,754 INFO L273 TraceCheckUtils]: 5: Hoare triple {3490#true} havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; {3490#true} is VALID [2018-11-23 12:54:22,754 INFO L256 TraceCheckUtils]: 6: Hoare triple {3490#true} call #t~ret32.base, #t~ret32.offset := my_malloc(8); {3490#true} is VALID [2018-11-23 12:54:22,754 INFO L273 TraceCheckUtils]: 7: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,754 INFO L256 TraceCheckUtils]: 8: Hoare triple {3490#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {3490#true} is VALID [2018-11-23 12:54:22,754 INFO L273 TraceCheckUtils]: 9: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,755 INFO L273 TraceCheckUtils]: 10: Hoare triple {3490#true} assume ~size > 0; {3490#true} is VALID [2018-11-23 12:54:22,755 INFO L273 TraceCheckUtils]: 11: Hoare triple {3490#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {3490#true} is VALID [2018-11-23 12:54:22,755 INFO L273 TraceCheckUtils]: 12: Hoare triple {3490#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {3490#true} is VALID [2018-11-23 12:54:22,755 INFO L273 TraceCheckUtils]: 13: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,755 INFO L268 TraceCheckUtils]: 14: Hoare quadruple {3490#true} {3490#true} #69#return; {3490#true} is VALID [2018-11-23 12:54:22,755 INFO L273 TraceCheckUtils]: 15: Hoare triple {3490#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L273 TraceCheckUtils]: 16: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L268 TraceCheckUtils]: 17: Hoare quadruple {3490#true} {3490#true} #77#return; {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L273 TraceCheckUtils]: 18: Hoare triple {3490#true} ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L256 TraceCheckUtils]: 19: Hoare triple {3490#true} call #t~ret33.base, #t~ret33.offset := my_malloc(8); {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L273 TraceCheckUtils]: 20: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L256 TraceCheckUtils]: 21: Hoare triple {3490#true} call #t~ret30.base, #t~ret30.offset := __getMemory(~size); {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L273 TraceCheckUtils]: 22: Hoare triple {3490#true} ~size := #in~size; {3490#true} is VALID [2018-11-23 12:54:22,756 INFO L273 TraceCheckUtils]: 23: Hoare triple {3490#true} assume ~size > 0; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L273 TraceCheckUtils]: 24: Hoare triple {3490#true} #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L273 TraceCheckUtils]: 25: Hoare triple {3490#true} assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L273 TraceCheckUtils]: 26: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L268 TraceCheckUtils]: 27: Hoare quadruple {3490#true} {3490#true} #69#return; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L273 TraceCheckUtils]: 28: Hoare triple {3490#true} #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L273 TraceCheckUtils]: 29: Hoare triple {3490#true} assume true; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L268 TraceCheckUtils]: 30: Hoare quadruple {3490#true} {3490#true} #79#return; {3490#true} is VALID [2018-11-23 12:54:22,757 INFO L273 TraceCheckUtils]: 31: Hoare triple {3490#true} ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; {3490#true} is VALID [2018-11-23 12:54:22,758 INFO L273 TraceCheckUtils]: 32: Hoare triple {3490#true} assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); {3490#true} is VALID [2018-11-23 12:54:22,758 INFO L256 TraceCheckUtils]: 33: Hoare triple {3490#true} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {3490#true} is VALID [2018-11-23 12:54:22,758 INFO L273 TraceCheckUtils]: 34: Hoare triple {3490#true} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} is VALID [2018-11-23 12:54:22,759 INFO L273 TraceCheckUtils]: 35: Hoare triple {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} is VALID [2018-11-23 12:54:22,759 INFO L273 TraceCheckUtils]: 36: Hoare triple {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} is VALID [2018-11-23 12:54:22,760 INFO L273 TraceCheckUtils]: 37: Hoare triple {3492#(and (<= list_add_~new.offset |list_add_#in~new.offset|) (<= |list_add_#in~new.offset| list_add_~new.offset) (= |list_add_#in~new.base| list_add_~new.base))} assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} is VALID [2018-11-23 12:54:22,760 INFO L273 TraceCheckUtils]: 38: Hoare triple {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} assume true; {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} is VALID [2018-11-23 12:54:22,761 INFO L268 TraceCheckUtils]: 39: Hoare quadruple {3493#(and (= |list_add_#in~new.base| ~elem~0.base) (= ~elem~0.offset |list_add_#in~new.offset|))} {3490#true} #81#return; {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} is VALID [2018-11-23 12:54:22,762 INFO L256 TraceCheckUtils]: 40: Hoare triple {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,763 INFO L273 TraceCheckUtils]: 41: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,763 INFO L273 TraceCheckUtils]: 42: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,764 INFO L273 TraceCheckUtils]: 43: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,764 INFO L273 TraceCheckUtils]: 44: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume !(0 != #t~nondet31);havoc #t~nondet31; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,765 INFO L273 TraceCheckUtils]: 45: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} assume true; {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,766 INFO L268 TraceCheckUtils]: 46: Hoare quadruple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} #83#return; {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} is VALID [2018-11-23 12:54:22,767 INFO L256 TraceCheckUtils]: 47: Hoare triple {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} call list_del(~dev2~0.base, ~dev2~0.offset); {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} is VALID [2018-11-23 12:54:22,768 INFO L273 TraceCheckUtils]: 48: Hoare triple {3495#(and (= ~elem~0.offset |old(~elem~0.offset)|) (= |old(~elem~0.base)| ~elem~0.base))} ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; {3496#(and (= list_del_~entry.base |list_del_#in~entry.base|) (= ~elem~0.base |old(~elem~0.base)|) (<= list_del_~entry.offset |list_del_#in~entry.offset|) (= ~elem~0.offset |old(~elem~0.offset)|) (<= |list_del_#in~entry.offset| list_del_~entry.offset))} is VALID [2018-11-23 12:54:22,769 INFO L273 TraceCheckUtils]: 49: Hoare triple {3496#(and (= list_del_~entry.base |list_del_#in~entry.base|) (= ~elem~0.base |old(~elem~0.base)|) (<= list_del_~entry.offset |list_del_#in~entry.offset|) (= ~elem~0.offset |old(~elem~0.offset)|) (<= |list_del_#in~entry.offset| list_del_~entry.offset))} assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); {3648#(and (= ~elem~0.base |old(~elem~0.base)|) (= ~elem~0.offset |old(~elem~0.offset)|) (or (not (= ~elem~0.base |list_del_#in~entry.base|)) (<= (+ |list_del_#in~entry.offset| 1) ~elem~0.offset) (<= (+ ~elem~0.offset 1) |list_del_#in~entry.offset|)))} is VALID [2018-11-23 12:54:22,770 INFO L273 TraceCheckUtils]: 50: Hoare triple {3648#(and (= ~elem~0.base |old(~elem~0.base)|) (= ~elem~0.offset |old(~elem~0.offset)|) (or (not (= ~elem~0.base |list_del_#in~entry.base|)) (<= (+ |list_del_#in~entry.offset| 1) ~elem~0.offset) (<= (+ ~elem~0.offset 1) |list_del_#in~entry.offset|)))} assume true; {3648#(and (= ~elem~0.base |old(~elem~0.base)|) (= ~elem~0.offset |old(~elem~0.offset)|) (or (not (= ~elem~0.base |list_del_#in~entry.base|)) (<= (+ |list_del_#in~entry.offset| 1) ~elem~0.offset) (<= (+ ~elem~0.offset 1) |list_del_#in~entry.offset|)))} is VALID [2018-11-23 12:54:22,771 INFO L268 TraceCheckUtils]: 51: Hoare quadruple {3648#(and (= ~elem~0.base |old(~elem~0.base)|) (= ~elem~0.offset |old(~elem~0.offset)|) (or (not (= ~elem~0.base |list_del_#in~entry.base|)) (<= (+ |list_del_#in~entry.offset| 1) ~elem~0.offset) (<= (+ ~elem~0.offset 1) |list_del_#in~entry.offset|)))} {3494#(and (= ~elem~0.offset main_~dev2~0.offset) (= main_~dev2~0.base ~elem~0.base))} #85#return; {3491#false} is VALID [2018-11-23 12:54:22,772 INFO L256 TraceCheckUtils]: 52: Hoare triple {3491#false} call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); {3491#false} is VALID [2018-11-23 12:54:22,772 INFO L273 TraceCheckUtils]: 53: Hoare triple {3491#false} ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; {3491#false} is VALID [2018-11-23 12:54:22,772 INFO L273 TraceCheckUtils]: 54: Hoare triple {3491#false} assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); {3491#false} is VALID [2018-11-23 12:54:22,772 INFO L256 TraceCheckUtils]: 55: Hoare triple {3491#false} call __blast_assert(); {3491#false} is VALID [2018-11-23 12:54:22,773 INFO L273 TraceCheckUtils]: 56: Hoare triple {3491#false} assume !false; {3491#false} is VALID [2018-11-23 12:54:22,778 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:54:22,803 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 12:54:22,804 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 9 [2018-11-23 12:54:22,804 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 57 [2018-11-23 12:54:22,805 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:54:22,805 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2018-11-23 12:54:22,856 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:22,857 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-23 12:54:22,857 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 12:54:22,857 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2018-11-23 12:54:22,858 INFO L87 Difference]: Start difference. First operand 79 states and 89 transitions. Second operand 9 states. [2018-11-23 12:54:23,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:23,942 INFO L93 Difference]: Finished difference Result 91 states and 100 transitions. [2018-11-23 12:54:23,942 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 12:54:23,942 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 57 [2018-11-23 12:54:23,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:54:23,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2018-11-23 12:54:23,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 66 transitions. [2018-11-23 12:54:23,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2018-11-23 12:54:23,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 66 transitions. [2018-11-23 12:54:23,947 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 66 transitions. [2018-11-23 12:54:24,123 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:54:24,125 INFO L225 Difference]: With dead ends: 91 [2018-11-23 12:54:24,126 INFO L226 Difference]: Without dead ends: 74 [2018-11-23 12:54:24,126 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 51 SyntacticMatches, 8 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:54:24,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2018-11-23 12:54:24,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 64. [2018-11-23 12:54:24,414 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:54:24,414 INFO L82 GeneralOperation]: Start isEquivalent. First operand 74 states. Second operand 64 states. [2018-11-23 12:54:24,414 INFO L74 IsIncluded]: Start isIncluded. First operand 74 states. Second operand 64 states. [2018-11-23 12:54:24,415 INFO L87 Difference]: Start difference. First operand 74 states. Second operand 64 states. [2018-11-23 12:54:24,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:24,418 INFO L93 Difference]: Finished difference Result 74 states and 81 transitions. [2018-11-23 12:54:24,419 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 81 transitions. [2018-11-23 12:54:24,419 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:24,419 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:24,419 INFO L74 IsIncluded]: Start isIncluded. First operand 64 states. Second operand 74 states. [2018-11-23 12:54:24,419 INFO L87 Difference]: Start difference. First operand 64 states. Second operand 74 states. [2018-11-23 12:54:24,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:54:24,423 INFO L93 Difference]: Finished difference Result 74 states and 81 transitions. [2018-11-23 12:54:24,423 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 81 transitions. [2018-11-23 12:54:24,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:54:24,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:54:24,424 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:54:24,424 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:54:24,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64 states. [2018-11-23 12:54:24,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 70 transitions. [2018-11-23 12:54:24,426 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 70 transitions. Word has length 57 [2018-11-23 12:54:24,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:54:24,427 INFO L480 AbstractCegarLoop]: Abstraction has 64 states and 70 transitions. [2018-11-23 12:54:24,427 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-23 12:54:24,427 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 70 transitions. [2018-11-23 12:54:24,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 12:54:24,428 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:54:24,428 INFO L402 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:54:24,428 INFO L423 AbstractCegarLoop]: === Iteration 9 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:54:24,428 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:54:24,428 INFO L82 PathProgramCache]: Analyzing trace with hash -1890753460, now seen corresponding path program 1 times [2018-11-23 12:54:24,429 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:54:24,429 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:54:24,430 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:24,430 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:54:24,430 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:54:24,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:54:24,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:54:24,497 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=15, |~#head~0.offset|=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [?] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume true; VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET #73#return; VAL [|~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #77#return; VAL [|main_#t~ret32.base|=0, |main_#t~ret32.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #79#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |main_#t~ret33.base|=0, |main_#t~ret33.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #81#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #83#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [|list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #85#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=0, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 != #t~nondet31);havoc #t~nondet31; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #87#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call __blast_assert(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !false; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- [2018-11-23 12:54:24,665 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# [2018-11-23 12:54:24,667 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=13, \old(elem)=9, \old(guard_malloc_counter)=11, \old(guard_malloc_counter)=10, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] ----- [2018-11-23 12:54:24,716 WARN L170 areAnnotationChecker]: my_mallocENTRY has no Hoare annotation [2018-11-23 12:54:24,716 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 12:54:24,716 WARN L170 areAnnotationChecker]: list_delENTRY has no Hoare annotation [2018-11-23 12:54:24,716 WARN L170 areAnnotationChecker]: list_addENTRY has no Hoare annotation [2018-11-23 12:54:24,716 WARN L170 areAnnotationChecker]: __blast_assertENTRY has no Hoare annotation [2018-11-23 12:54:24,716 WARN L170 areAnnotationChecker]: __blast_assertENTRY has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: __getMemoryENTRY has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: L879 has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: L879 has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2018-11-23 12:54:24,717 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: __blast_assertFINAL has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L904 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L904 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2018-11-23 12:54:24,718 WARN L170 areAnnotationChecker]: L879-1 has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: L896-2 has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: L890-3 has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: L890-2 has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: L890-2 has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: __blast_assertEXIT has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: __blast_assertEXIT has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 12:54:24,719 WARN L170 areAnnotationChecker]: L904-1 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L871-3 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L871-2 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L871-2 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: my_mallocFINAL has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: list_delEXIT has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L891 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2018-11-23 12:54:24,720 WARN L170 areAnnotationChecker]: L873 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L873 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: my_mallocEXIT has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: my_mallocEXIT has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L909 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L909 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L891-2 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L905-1 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: __getMemoryFINAL has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2018-11-23 12:54:24,721 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2018-11-23 12:54:24,722 WARN L170 areAnnotationChecker]: list_addEXIT has no Hoare annotation [2018-11-23 12:54:24,723 WARN L170 areAnnotationChecker]: list_addEXIT has no Hoare annotation [2018-11-23 12:54:24,723 WARN L170 areAnnotationChecker]: list_addEXIT has no Hoare annotation [2018-11-23 12:54:24,723 WARN L170 areAnnotationChecker]: list_addEXIT has no Hoare annotation [2018-11-23 12:54:24,723 WARN L170 areAnnotationChecker]: L906 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L906 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: __getMemoryEXIT has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L906-1 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L908 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L908 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L907 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: L907 has no Hoare annotation [2018-11-23 12:54:24,724 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 12:54:24,725 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 12:54:24,725 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 12:54:24,729 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:54:24 BoogieIcfgContainer [2018-11-23 12:54:24,729 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 12:54:24,729 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 12:54:24,729 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 12:54:24,730 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 12:54:24,730 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:53:41" (3/4) ... [2018-11-23 12:54:24,732 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=15, |~#head~0.offset|=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [?] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume true; VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET #73#return; VAL [|~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #77#return; VAL [|main_#t~ret32.base|=0, |main_#t~ret32.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #79#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |main_#t~ret33.base|=0, |main_#t~ret33.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #81#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #83#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [|list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #85#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=0, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 != #t~nondet31);havoc #t~nondet31; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #87#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call __blast_assert(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !false; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- [2018-11-23 12:54:24,808 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# [2018-11-23 12:54:24,808 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=9, \old(elem)=13, \old(guard_malloc_counter)=10, \old(guard_malloc_counter)=11, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] ----- [2018-11-23 12:54:24,899 INFO L145 WitnessManager]: Wrote witness to /storage/repos/svcomp/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i-witness.graphml [2018-11-23 12:54:24,899 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 12:54:24,900 INFO L168 Benchmark]: Toolchain (without parser) took 45042.84 ms. Allocated memory was 1.5 GB in the beginning and 2.7 GB in the end (delta: 1.2 GB). Free memory was 1.4 GB in the beginning and 2.1 GB in the end (delta: -680.8 MB). Peak memory consumption was 494.1 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,901 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:54:24,901 INFO L168 Benchmark]: CACSL2BoogieTranslator took 655.29 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 42.3 MB). Peak memory consumption was 42.3 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,902 INFO L168 Benchmark]: Boogie Procedure Inliner took 112.44 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 734.5 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -839.6 MB). Peak memory consumption was 15.8 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,902 INFO L168 Benchmark]: Boogie Preprocessor took 29.01 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.2 MB). Peak memory consumption was 13.2 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,903 INFO L168 Benchmark]: RCFGBuilder took 925.39 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 35.3 MB). Peak memory consumption was 35.3 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,903 INFO L168 Benchmark]: TraceAbstraction took 43145.95 ms. Allocated memory was 2.3 GB in the beginning and 2.7 GB in the end (delta: 440.4 MB). Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 25.9 MB). Peak memory consumption was 466.3 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,903 INFO L168 Benchmark]: Witness Printer took 169.77 ms. Allocated memory is still 2.7 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 42.1 MB). Peak memory consumption was 42.1 MB. Max. memory is 7.1 GB. [2018-11-23 12:54:24,906 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 655.29 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 42.3 MB). Peak memory consumption was 42.3 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 112.44 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 734.5 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -839.6 MB). Peak memory consumption was 15.8 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 29.01 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.2 MB). Peak memory consumption was 13.2 MB. Max. memory is 7.1 GB. * RCFGBuilder took 925.39 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 35.3 MB). Peak memory consumption was 35.3 MB. Max. memory is 7.1 GB. * TraceAbstraction took 43145.95 ms. Allocated memory was 2.3 GB in the beginning and 2.7 GB in the end (delta: 440.4 MB). Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 25.9 MB). Peak memory consumption was 466.3 MB. Max. memory is 7.1 GB. * Witness Printer took 169.77 ms. Allocated memory is still 2.7 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 42.1 MB). Peak memory consumption was 42.1 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 6]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=13, \old(elem)=9, \old(guard_malloc_counter)=11, \old(guard_malloc_counter)=10, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 48 locations, 1 error locations. UNSAFE Result, 43.0s OverallTime, 9 OverallIterations, 4 TraceHistogramMax, 32.6s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 319 SDtfs, 516 SDslu, 1330 SDs, 0 SdLazy, 4526 SolverSat, 567 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 11.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 514 GetRequests, 274 SyntacticMatches, 11 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1371 ImplicationChecksByTransitivity, 6.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=79occurred in iteration=7, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 8 MinimizatonAttempts, 56 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 7.3s InterpolantComputationTime, 713 NumberOfCodeBlocks, 713 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 635 ConstructedInterpolants, 0 QuantifiedInterpolants, 109006 SizeOfPredicates, 41 NumberOfNonLiveVariables, 1627 ConjunctsInSsa, 157 ConjunctsInUnsatCore, 14 InterpolantComputations, 3 PerfectInterpolantSequences, 136/211 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...